Lightspin threat researchers discovered the bug, which AWS fixed A local file read vulnerability in Amazon's Relational Database Service (RDS) could be exploited to allow an attacker to gain access to internal AWS credentials, the cloud behemoth has confirmed.…  ( 8 min )

Only 36% use it now, but an additional 47% plan to adopt HAS in the next year An Intel study finds that businesses are eager for cybersecurity and are keen to see how security can be baked into devices.…  ( 8 min )

Says its other global operations won't be affected by the process Cloud and datacenter service provider Sungard Availability Services has filed for bankruptcy both in the US and for its Canadian subsidiary, just weeks after its UK division was forced into administration.…  ( 8 min )

Industrial giants, cybersec vendors collect under OTCSA banner A number of the world's largest manufacturing and cybersecurity companies are getting behind a new consortium aimed at protecting industrial systems from threats.…  ( 8 min )

Lambda, Razer take on Apple with Tensorbook for ML engineers AI hardware company Lambda and PC gaming rig maker Razer are hoping to steal some thunder from Apple's M1 Max-powered MacBook Pro with a new laptop designed explicitly for machine learning engineers.…  ( 8 min )

Python's stranglehold in data science makes Neo4j rethink language strategy Graph database specialist Neo4j has launched a graph analytics workspace as a fully managed cloud service.…  ( 9 min )

Personal security, private travel, for exec making a single 'Zuck Buck' Meta only paid Mark Zuckerberg $1 last year, and the board recently voted to do the same in 2022. …  ( 8 min )

Guarding against the forever almost-here crypto-cracking tech OpenSSH 9 is here, with updates aimed at dealing with cryptographically challenging quantum computers.…  ( 8 min )

Reveals confidential filing but no pricing ahead of review by the SEC Arm-based server processor upstart Ampere Computing has signaled its intention to go public, and said it has filed the initial paperwork with the US Securities and Exchange Commission (SEC).…  ( 9 min )

Will the last Western tech biz in Russia please turn out the lights? Nokia is the second of the world's biggest telco network kit makers to turn its back on Russia in as many days due to the continuing invasion in Ukraine - yesterday Ericsson "indefinitely" pulled out of the country.…  ( 8 min )

Constant versioning of file systems is the way to go, Nasuni cofounder says Interview  As CTO of The New York Times two decades ago, Andres Rodriguez became frustrated with the time-consuming and unreliable process of backing up massive amounts of data that was only tested when it failed.…  ( 10 min )

That freebie that saved your bacon once or twice? Perhaps it's time to drop a bit of cash on it A timely reminder is being issued to the effect that free web services are not the same as free software: the creator of the SSLPing service says he can't look after it anymore.…  ( 8 min )

CVSS 9.8 flaws are not what you want in a hospital robot Mobile robot maker Aethon has fixed a series of vulnerabilities in its Tug hospital robots that, if exploited, could allow a cybercriminal to remotely control thousands of medical machines.…  ( 10 min )

Designed by a six-year-old, the design just needs a rocket on which to ride The UK Space Agency has marked the International Day of Human Spaceflight by announcing the winner of the Logo Lift-off Competition.…  ( 8 min )

Last week, colocating datacenters and sewage plants: this week, renewables and H2 producers A project to produce green hydrogen using wind power is planned in the mid-east of Sweden, which is expected to have the ability to make up to 240 tons of the stuff on-site every day.…  ( 8 min )

Outfits that can rummage around inside customer systems need to prove they're up to the job - and accountable Cybersecurity service providers must for licenses to operate in Singapore, under new regulations launched by the country’s Cyber Security Agency (CSA) on Monday.…  ( 8 min )

Adds cache-like storage currently offered for servers to speed demanding desktop workloads Amazon Web Services has made an interesting tweak to its “Workspaces” desktop-as-a-service offering: temporary local storage.…  ( 7 min )

Same biometric used for different people, no archives, lousy infosec among the issues India’s Comptroller and Auditor General has published a performance audit of the nation’s Unique Identification Authority and found big IT problems – some attributable to Indian services giant HCL and to HP, but others due to poor government decisions.…  ( 8 min )

14,000 small developers reported to have gone out of business during approval hiatus After a nine month pause, Beijing has finally granted new video game licenses to 45 titles.…  ( 7 min )

Another reason why this year and next will suck Alerts issued this month are pointing to chip supply issues being resolved only when new factories become operational in 2024.…  ( 8 min )

Fair Trade Commission concerned false paperwork took years to decipher Samsung boss Lee Jae-yong is in trouble – again – this time over false filings about the extent of his shareholdings.…  ( 7 min )

Attackers can insert hidden samples to steal secrets Machine learning models can be forced into leaking private data if miscreants sneak poisoned samples into training datasets, according to new research.…  ( 9 min )

Cloud collaboration biz says script deleted data that's so far been restored via backups The Atlassian outage that began on April 5 is likely to last a bit longer for the several hundred customers affected.…  ( 8 min )

Pegasus software maker faces mounting lawsuits, investigations in the US and EU Someone at least tried to use NSO Group's surveillance software to spy on European Commission officials last year, according to a Reuters report. …  ( 8 min )

Today is Microsoft's April 2022 Patch Tuesday, and with it comes fixes for two zero-day vulnerabilities and a total of 119 flaws. [...]  ( 9 min )

Microsoft has released Windows 10 KB5012599 and KB5012591 cumulative updates for versions 21H2, version 21H1, version 20H2 and 1909 to fix security vulnerabilities and resolve bugs. [...]  ( 3 min )

Microsoft has discovered a new malware used by the Chinese-backed Hafnium hacking group to maintain persistence on compromised Windows systems by creating and hiding scheduled tasks. [...]  ( 3 min )

HP is warning of new critical security vulnerabilities in the Teradici PCoIP client and agent for Windows, Linux, and macOS that impact 15 million endpoints. [...]  ( 3 min )

The RaidForums hacker forum, used mainly for trading and selling stolen databases, has been shut down and its domain seized by U.S. law enforcement during Operation TOURNIQUET, an action coordinated by Europol that involved law enforcement agencies in several countries. [...]  ( 5 min )

Threat analysts have found evidence of malicious actors using the LockBit ransomware strain lingering in the network of a regional U.S. government agency for at least five months. [...]  ( 4 min )

The Russian state-sponsored hacking group known as Sandworm tried on Friday to take down a large Ukrainian energy provider by disconnecting its electrical substations with a new variant of the Industroyer malware for industrial control systems (ICS) and a new version of the CaddyWiper data destruction malware. [...]  ( 5 min )

The Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal civilian agencies and urged all US organizations on Monday to patch an actively exploited bug impacting WatchGuard Firebox and XTM firewall appliances. [...]  ( 4 min )

I’m a big fan of movies by J.J. Abrams. I enjoy their tight plots, quippy dialog, and of course: anamorphic lens flares. Filmmakers like Abrams use lens flare to add a dash of ‘homemade’ realism to their movies, … Add a CSS Lens Flare to Photos for a Bright Touch originally published on CSS-Tricks. You should get the newsletter.  ( 5 min )

Der EU-Datenschutzbeauftragte moniert, Frontex habe keine ordnungsgemäße Datenschutzprüfung durchgeführt und DSGVO-konforme Lösungen außen vor gelassen.  ( 4 min )

Über Frame.io können Teams Videodateien in Premiere Pro online kommentieren. After Effects soll auf M1-Macs deutlich schneller laufen.  ( 4 min )

Unser werktäglicher News-Überblick fasst die wichtigsten Nachrichten des Tages kurz und knapp zusammen.  ( 4 min )

Seit Jahresanfang sehen GDatas Sicherheitsforscher einen Anstieg an Malware, die Zugangstoken zu Discord stehlen will. Nutzer sollten Maßnahmen ergreifen.  ( 4 min )

Zwischenzeitlich ließ sich der Bildschirm nicht mehr auf die aktuelle Firmware bringen. Bugs der Kamera bestehen bislang weiter.  ( 4 min )

Zwei Stellen sind in der Entwicklungsabteilung von Heise Medien neu zu besetzen: Frontend-Web-Developer und Web-Developer mit Schwerpunkt Backend.  ( 3 min )

Der Software-Anbieter Box hat das virtuelle Whiteboard "Canvas" vorgestellt. Das Kollaborations-Werkzeug soll ab Herbst in allen Box-Tarifen nutzbar sein.  ( 3 min )

Wer mit TeamViewer auf Linux-Desktops zugreifen will, braucht auf Client-Seite künftig kein Xorg mehr. Noch ist der Wayland-Support jedoch experimentell.  ( 3 min )

Offenbar arbeitet Apple an einem neuen Kompaktrechner. Er könnte erstmals mit M2-Chip ausgestattet sein.  ( 4 min )

Mit zwei neuen Instanzen richtet Amazon seine WorkSpaces stärker auf GPU-Applikationen aus. Die Cloud-Desktops konkurrieren mit Microsofts Windows 365.  ( 3 min )

Das Entwicklerteam hinter JetBrains Ktor führt mit dem Update unter anderem einheitliche Namenskonventionen für Pakete und Module ein.  ( 4 min )

Der Digitalpakt Schule ist besser als sein Ruf, aber nicht so gut, wie er sein könnte. Was sich bei der nächsten Auflage hoffentlich ändern wird.  ( 6 min )

Die erste Hauptversion des Release-Management-Tools JReleaser veröffentlicht Artefakte gleich in mehreren Paketmanagern und lässt sich individuell anpassen.  ( 3 min )

Eine neue Action mit zugehöriger API soll verhindern, dass bekannte Supply-Chain-Sicherheitslücken ihren Weg in den Code von GitHub-Nutzern finden.  ( 4 min )

Bei einem Drittel der vom Ausfall Betroffenen sollen die Jira und Confluence inzwischen wieder funktionieren. Der Rest muss sich noch eine Weile gedulden.  ( 3 min )

Für Kunden mit Enterprise-Lizenz bietet Microsoft demnächst den Autopatch-Mechanismus an, der Updates in Wellen verteilt und dabei Nebenwirkungen vermeidet.  ( 5 min )

Bei der Online-Konferenz am 26. April 2022 können Teilnehmende die Umsetzung eines kompletten Data-Science-Projekts lernen.  ( 4 min )

Durch ein Datenleck der Buchungsseite für Legoland-Übernachtungen im bayerischen Günzburg waren Kundendaten öffentlich einsehbar – seit sieben Jahren.  ( 4 min )

Die NovaStor GmbH hat ihrem Datensicherungspaket DataCenter neue Funktionen spendiert. Unter anderem bietet es zentrales Monitoring und Backups in die Cloud.  ( 4 min )

Nachdem die Mitbewerber Ansible, Chef und SaltStack in den letzten Jahren aufgekauft wurden, findet nun auch Puppet ein neues Mutterunternehmen.  ( 4 min )

Linux-Server erfolgreich aufsetzen und verwalten – für Windows-Admins und Quereinsteiger mit guten EDV-Kenntnissen. Online-Workshop vom 25. bis 29. April.  ( 3 min )

Der Webbrowser Chrome schließt in aktueller Version für Linux, Mac und Windows elf Sicherheitslücken. Durch einige könnten Angreifer vermutlich Code ausführen.  ( 4 min )

Russian hackers targeted the Ukrainian power grid and attempted to cause a blackout that would have hit 2 million people, according to Ukrainian government officials and the Slovakian cybersecurity firm ESET. The hackers attempted to destroy computers at a Ukrainian energy company using a wiper, malware specifically designed to destroy targeted systems by erasing key…  ( 4 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Money is about to enter a new era of competition We’re on the cusp of a giant upheaval to the ways we pay for things. Cash is on the way out, and the…  ( 4 min )

Money is one of humankind’s most remarkable innovations. It makes it possible to trade products and services across great geographic distances, between people who may not know each other and have no particular reason to trust each other. It can even be used to transfer wealth and resources over time. Without money, trade and commerce—all…  ( 10 min )

Researchers have disclosed a previously undocumented local file inclusion (LFI) vulnerability in Hashnode, a developer-oriented blogging platform, that could be abused to access sensitive data such as SSH keys, server's IP address, and other network information. "The LFI originates in a Bulk Markdown Import feature that can be manipulated to provide attackers with unimpeded ability to download  ( 3 min )

Senior officials in the European Union were allegedly targeted with NSO Group's infamous Pegasus surveillance tool, according to a new report from Reuters. At least five individuals, including European Justice Commissioner Didier Reynders, are said to have been singled out in total, the news agency said, citing documents and two unnamed E.U. officials. However, it's not clear who used the  ( 3 min )

The mass adoption of cloud infrastructure is fully justified by innumerable advantages. As a result, today, organizations' most sensitive business applications, workloads, and data are in the cloud. Hackers, good and bad, have noticed that trend and effectively evolved their attack techniques to match this new tantalizing target landscape. With threat actors' high reactivity and adaptability, it  ( 4 min )

The maintainers of the NGINX web server project have issued mitigations to address security weaknesses in its Lightweight Directory Access Protocol (LDAP) Reference Implementation. "NGINX Open Source and NGINX Plus are not themselves affected, and no corrective action is necessary if you do not use the reference implementation," Liam Crilly and Timo Stark of F5 Networks said in an advisory  ( 3 min )

Google on Monday disclosed that it's taking legal action against a nefarious actor who has been spotted operating fraudulent websites to defraud unsuspecting people into buying non-existent puppies. "The actor used a network of fraudulent websites that claimed to sell basset hound puppies — with alluring photos and fake customer testimonials — in order to take advantage of people during the  ( 2 min )

A new traffic direction system (TDS) called Parrot has been spotted leveraging tens of thousands of compromised websites to launch further malicious campaigns. "The TDS has infected various web servers hosting more than 16,500 websites, ranging from adult content sites, personal websites, university sites, and local government sites," Avast researchers Pavel Novák and Jan Rubín said in a report  ( 3 min )

Like many things, a design system isn’t ever a finished thing — it’s a journey. How we go about that journey can affect the things we produce along the way. Before diving in and starting to plan anything out, be clear about where the benefits and the risks might lie.  ( 14 min )

Der Webbrowser Chrome schließt in aktueller Version für Linux, Mac und Windows elf Sicherheitslücken. Durch einige könnten Angreifer vermutlich Code ausführen.  ( 4 min )

Developers are increasingly voicing their opinions through their open source projects in active use by thousands of software applications and organizations. Most recently, the developer of the 'event-source-polyfill' npm package peacefully protested Russia's "unreasonable invasion" of Ukraine, to Russian consumers. [...]  ( 6 min )

The Qbot botnet is now pushing malware payloads via phishing emails with password-protected ZIP archive attachments containing malicious MSI Windows Installer packages. [...]  ( 3 min )

The Italian luxury fashion company Ermenegildo Zegna has disclosed a ransomware incident from August 2021 that has resulted in an extensive IT systems outage. [...]  ( 4 min )

Atlassian, a UK-based company making software development and collaboration tools, estimates it might take two more weeks to restore all customer instances impacted by a week-long ongoing outage affecting its cloud services. [...]  ( 4 min )

If you are waiting for Windows 11 side-taskbar support before upgrading to the latest operating system, you may be waiting for a long time, according to a recent Microsoft Ask Me Anything (AMA) session. [...]  ( 4 min )

A banking trojan for Android that researchers call Fakecalls comes with a powerful capability that enables it to take over calls to a bank's customer support number and connect the victim directly with the cybercriminals operating the malware. [...]  ( 4 min )

Windows 11 version 22H2 is arriving later this year and it won't be a massive release, but there will be several improvements and bugs fixes. During the Hybrid work event, Microsoft officially teased new features coming to the operating system this year. [...]  ( 4 min )

What looked like Plan B is now Plan A for config management biz Perforce, a Minnesota-based maker of DevOps software, on Monday announced the acquisition of Puppet, an Oregon-based maker of configuration management tools, for an undisclosed sum.…  ( 8 min )

Chip giant also reveals next-gen 18A process months ahead of schedule Intel has officially opened a new $3 billion expansion of its Oregon research and development campus that is key to the chipmaker's plan to overtake rivals with leading-edge chip technologies.…  ( 8 min )

New RSK Tornado system will help Russia port HPC apps to homegrown CPUs Russia is adapting to a world where it no longer has access to many technologies abroad with the development of a new supercomputer platform that can use foreign x86 processors such as Intel's in combination with the country's homegrown Elbrus processors.…  ( 7 min )

Trend Micro says vulnerable systems in Singapore have been compromised There has been a land rush of sorts among threat groups trying to use the vulnerability discovered in the open-source Spring Framework last month, and now researchers at Trend Micro are saying it's being actively exploited to execute the Mirai botnet.…  ( 8 min )

Long-awaited major release welcomed by users who wish IBM would promote it a little more In the first major upgrade since 2016, IBM is releasing a basket of updates for the edition of its well-established Db2 relational database for the z/OS mainframe operating system. The latest tweaks are designed to use machine learning to make systems more efficient to manage and operate.…  ( 8 min )

Out of this world service for Musk's satellite broadband It appears that even users of Elon Musk's Starlink service are not immune to the odd bit of borkage as the broadband-from-orbit system suffered an outage at the weekend.…  ( 7 min )

That's what Thoma Bravo is paying for SailPoint in a mid-pandemic market A $6.9 billion acquisition is putting a hard number on the value of Identity and Access Management (IAM). …  ( 7 min )

Goal to prevent brain drain of talented computer scientists from region A new Eastern Europe-based research institute aimed at advancing artificial intelligence (AI) and computing is trying to stem the flood of talented computer scientists exiting the region for the West.…  ( 8 min )

However, 'structural undersupply' might ease in the next six months or so The ongoing supply chain woes in the semiconductor market are set to last through this year and next, according to Volkswagen, which believes underlying structural problems are unlikely to be resolved before 2024.…  ( 8 min )

Plus: Can algorithms tell us how we're feeling from the sound of our voices and more In brief  The EU Commission wants to build a giant facial recognition database that will be shared with law enforcement across different countries.…  ( 9 min )

Plus: AMD tells El Reg it stopped 'all technical, product support and marketing' in pariah state Swedish network system maker Ericsson has confirmed it has "indefinitely" halted all shipments to clients in Russia, joining the ever growing list of tech organizations protesting the atrocities in Ukraine.…  ( 8 min )

Sabre deal with Google creates parallel data architecture to support ML-based ecommerce partnerships with airlines and hotel chains Feature  The computing and travel industries have traveled hand in hand for decades. For perspective, American Airlines signed a deal with IBM in 1957 which developed the first computer reservation system in 1960, based on two IBM 7090 mainframes.…  ( 9 min )

Majority of affected users still wondering where their data went The great Atlassian outage is stumbling into a new week, with the company reporting it has "rebuilt functionality for over 35 percent of the users who are impacted by the service outage," meaning the majority of those afflicted remain unable to access their sites.…  ( 7 min )

Beijing struggles to contain both misinformation and inconvenient dissent amid mass lockdowns The 25 million plus residents of the Chinese city of Shanghai are being warned not to spread rumors online or to complain about conditions during ongoing and strict COVID-19 lockdowns imposed since March 28.…  ( 8 min )

Plus: Fox News learns to use database passwords, Autodesk patches high-severity bugs, and CISA says retire old D-Link routers In brief  Google pulled a slew of Android apps with more than 46 million downloads from its Google Play Store after security researchers notified the cloud giant that the code contained some sneaky data-harvesting code.…  ( 11 min )

Next stop, French Guiana. Then Jupiter Feature  The European Space Agency's (ESA) JUICE (Jupiter Icy Moons Explorer) spacecraft has kicked off electromagnetic testing in the Airbus Defence and Space cleanrooms in Toulouse.…  ( 9 min )

Hopes to taps into pool of tech workers who aren't keen to be tied down for 40 hours per week Dell employees in the Netherlands will be able to work four days a week from this month, a director of Dell Technologies Netherlands has confirmed to The Register.…  ( 10 min )

We answer today's burning question: should YOU buy an IBM z16? Opinion  IBM's most exciting mainframe yet, the  z16, is finally here.  Just three years after the z15, at this rate IBM has until 2212 to buy the z80 trademark from Zilog.…  ( 10 min )

Where the phrase 'don't put all your eggs in one basket' originates Who, Me?  Who has got your back up? Forget comments in code, what do you do when all your source has been packed into the trunk of a family sedan? Welcome to Who, Me?…  ( 9 min )

Management promises it will keep listening, and Elon shows no sign of going quiet SpaceX and Tesla tycoon Elon Musk won't be joining Twitter's board, despite last week revealing he had acquired a 9.2 per cent stake in the microblogging service.…  ( 8 min )

Analyst says it's not a 'downward spiral' as sales are still defying predictions Shipments of PCs have finally slowed down after two years of double-digit growth, declining worldwide by 5.1 per cent year-on-year in Q1 2022, market research firm International Data Corp (IDC) said on Monday.…  ( 8 min )

Shouldn't a company from the same stable as Tata Consulting Services do better with a day one traffic flood? Giant Indian industrial conglomerate Tata has launched its attempt to rival Amazon.com and Walmart's e-commerce efforts, but suffered a bad case of the first day scalability jitters.…  ( 8 min )

Please dismiss any thoughts you had that increasing regulation might have hurt the economy China's Cyberspace Administration has published statistics to assert that the nation's big technology companies are growing and not laying off thousands of workers.…  ( 8 min )

Ab 2025 will Intels Chipfertigungssparte den Konkurrenten TSMC ausstechen – dafür verkauft ASML die erste High-NA-Belichtungsmaschine an die Firma.  ( 5 min )

Paketdienste schotten ihr Tracking immer mehr ab. Für den Entwickler einer altgedienten App, die verschiedene Dienste unterstützt, wird die Luft dünn.  ( 4 min )

Version 9.0 von OpenSSH behebt viele Fehler des freien SSH-Frameworks – und soll schon jetzt vorausschauend vor Qantencomputer-Angriffen schützen.  ( 4 min )

Die Beta enthält neben der ursprünglich bereits für TypeScript 4.5 geplanten Anbindung an ESM eine erweiterte Kontrollflussanalyse für berechnete Properties.  ( 5 min )

Die EU-Kommission stört sich offenbar an weiteren App-Store-Regeln. Nach Ansicht der Wettbewerbsaufsicht benachteiligt Apple andere Musik-Streaming-Dienste.  ( 4 min )

Unser werktäglicher News-Überblick fasst die wichtigsten Nachrichten des Tages kurz und knapp zusammen.  ( 4 min )

Sicherheitsforscher haben beobachtet, dass das Mirai-Botnet die Spring4Shell-Schwachstelle angreift und dadurch die Malware verbreitet.  ( 4 min )

Die Konferenz zu aktuellen Machine-Learning-Themen findet im Juni wieder vor Ort statt. Wer die aktuelle Lage noch beobachtet, bekommt weiter Rabatt.  ( 4 min )

Admins von Systemen mit Dell EMC PowerScale OneFS sollten die Software aus Sicherheitsgründen auf den aktuellen Stand bringen.  ( 3 min )

Anderthalb Monate nach Beginn des russischen Angriffskriegs gegen die Ukraine setzt nun auch Ericsson seine Geschäfte in Russland komplett aus.  ( 3 min )

Die Konferenzreihe betrachtet Themen wie Führungskompetenz, Zusammenarbeit in Teams und hilfreiche Tools & Techniken unter dem Aspekt des hybriden Arbeitens.  ( 4 min )

Die Raspberry Pi-Macher haben im Standardnutzer pi ein Sicherheitsproblem erkannt. Deshalb muss er gehen. Weitere Verbesserungen vereinfachen die Nutzung.  ( 6 min )

Das Active Directory ist der Dreh- und Angelpunkt bei Ransomware-Angriffen. Wie man es absichert, zeigt das neue iX kompakt auf über 170 Seiten.  ( 4 min )

Offenbar durch ein Versehen war ein Supportdokument vorab online. Der Konzern könnte demzufolge in Kürze seine erste Doppel-Stromversorgung anbieten.  ( 4 min )

Seit fast einer Woche arbeiten "hunderte Ingenieure" daran, dass alle Atlassian-Kunden wieder auf die Kollaborations-Tools des Anbieters zugreifen können.  ( 4 min )

Es gibt wichtige Sicherheitsupdates für die Webbrowser Firefox ESR und Tor Browser und für den Mailclient Thunderbird.  ( 3 min )

In drei Tagen mit dem Elastic Stack die eigenen Unternehmensdaten überwachen und in Echtzeit analysieren und visualisieren lernen. 10 % Preisnachlass bis 25.4.  ( 3 min )

Admins von Systemen mit Dell EMC PowerScale OneFS sollten die Software aus Sicherheitsgründen auf den aktuellen Stand bringen.  ( 3 min )

Es gibt wichtige Sicherheitsupdates für die Webbrowser Firefox ESR und Tor Browser und für den Mailclient Thunderbird.  ( 3 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Inside the fierce, messy fight over “healthy” sugar tech In a former insurance office building on the outskirts of Charlottesville, Virginia, a new kind of sugar factory is taking shape. The facility is…  ( 4 min )

In a former insurance office building on the outskirts of Charlottesville, Virginia, a new kind of sugar factory is taking shape. The 48,000-square-foot facility is being developed by a startup called Bonumose, funded in part by Hershey. It uses a processed corn product called maltodextrin that is found in many junk foods. Like its notorious…  ( 17 min )

Cybersecurity researchers are warning of two different information-stealing malware, named FFDroider and Lightning Stealer, that are capable of siphoning data and launching further attacks. "Designed to send stolen credentials and cookies to a Command & Control server, FFDroider disguises itself on victim's machines to look like the instant messaging application 'Telegram,'" Zscaler ThreatLabz  ( 3 min )

Microsoft last week announced that it intends to make generally available a feature called Autopatch as part of Windows Enterprise E3 in July 2022. "This service will keep Windows and Office software on enrolled endpoints up-to-date automatically, at no additional cost," said Lior Bela, senior product marketing manager at Microsoft, in a post last week. "The second Tuesday of every month will be  ( 3 min )

This new attribute will enable us to fine-tune relative resource priority, improve LCP performance, deprioritize JavaScript fetch calls, and much more. Let’s check out fetchpriority and explore some potential use cases.  ( 8 min )

Independent analyst Brand Duncan has spotted a malspam campaign delivering META, a new info-stealer malware that appears to be rising in popularity among cybercriminals. [...]  ( 4 min )

Microsoft has tweaked the Microsoft Edge sleeping tabs feature to further improve the web browser's overall responsiveness and performance. [...]  ( 3 min )

Das Deutsche Zentrum für Luft- und Raumfahrt testet einen Arbeitsplatz für die bei Robo-Autos hierzulande gesetzlich vorgeschriebenen technischen Aufseher.  ( 5 min )

Microsoft übernimmt die Kontrolle von sieben Domains, die für Cyberangriffe auf die Ukraine genutzt wurden. Dahinter stecke der russische Geheimdienst.  ( 4 min )

Gelöschte Tweets sollen weiterhin sichtbar bleiben: Twitter zieht eine gerade erst eingeführte Änderung zurück, die eingebettete Tweets unlesbar machte.  ( 4 min )

Washington looks to private sector help for Open RAN ambitions The US Department of Defense is encouraging companies to build open and interoperable 5G, and it's willing to shell out a portion of $3 million to anyone who provides a solution.…  ( 9 min )

A model can improve overnight, it just takes pared-down scale and a little human intervention It turns out the machines still need us after all, at least for now. And while the largest systems get the most attention, the secret to truly useful, fair AI are best served small and with plenty of human input.…  ( 9 min )

The smallest artificial spin ice ever created could be part of novel low-power HPC Researchers at the Paul Scherrer Institute and ETH Zurich have managed to accomplish a technological breakthrough that could lead to new forms of low-energy supercomputing.…  ( 9 min )

ML master pitches trimmed-down deep learning for the masses In 2015, modern AI trailblazer Andrew Ng's recipe for success was to go big on neural networks, data, and monolithic systems. Now that recipe has created a problem: the technology is dominated by only a few rich companies with the money and headcount to build such immense systems.…  ( 9 min )

Do we have enough toner for barracks in Fort Bliss base in Texas? The US Department of Defense is to construct and try out the largest 3D-printed buildings in the Americas: three barracks in a Lone Star army base.…  ( 8 min )

FromSoftware's magnum opus, made with input from George R R Martin, invites new and veteran players alike The RPG  Greetings, traveler, and welcome back to The Register Plays Games, our monthly gaming column. You'll forgive the lateness of this edition because there was really only one game that mattered in March – perhaps the entirety of 2022 – and that game's name is Elden Ring.…  ( 19 min )

Online attacks follow suspected airspace violation by Russian aircraft Cyberattacks took down Finnish government websites on Friday while Ukrainian President Volodymyr Zelenskyy addressed Finland's members of parliament (MPs).…  ( 8 min )

Microsoft OneDrive: Missing documents? Hold my beer Atlassian is still scrambling to recover from a recent software script fiasco and is hoping no customer data gets lost, which may be more than Microsoft can manage if OneDrive, as some have reported, has been intermittently corrupting large uploads for at least two months.…  ( 9 min )

Saturday rendezvous planned for historic commercial orbit ride A retired NASA astronaut and three space tourists are right now tucked inside a SpaceX Dragon capsule above Earth for the first-ever purely commercial mission to the International Space Station.…  ( 8 min )

Batteries, displays, cameras and more, apparently In a nod to right-to-repair efforts, Google is partnering with iFixit to offer spare parts for its Pixel smartphones dating all the way back to 2017.…  ( 8 min )

A hacking group used the Conti's leaked ransomware source code to create their own ransomware to use in cyberattacks against Russian organizations. [...]  ( 4 min )

A new Android banking malware named Octo has appeared in the wild, featuring remote access capabilities that allow malicious operators to perform on-device fraud. [...]  ( 4 min )

Microsoft announced that Windows Autopatch, a service designed to automatically keep Windows and Office software up to date, will be released in July 2022. [...]  ( 3 min )

Viele USB-Geräte belegen zusammen mit einem Netzteil eine komplette Steckdose. Doch das ist in vielen Fällen unnötig. Steckdosen mit USB-Ports schaffen Abhilfe.  ( 4 min )

Die EU-Kommission steht in der Kritik, da sie BT trotz Brexit einen 1,2 Milliarden Euro Auftrag für den Transeuropäischen Telematikdienst erteilen will.  ( 5 min )

Der VDE hat ein Fortbildungsprogramm zu technisch versierten Arzt- und Patientenhelfern zertifiziert. Sie sollen Gesundheits-Apps und die ePA voranbringen.  ( 5 min )

Das Wirtschaftsministerium hat für die EU-Initiative für Cloud-Infrastrukturen mehrere, teils besonders energieeffiziente Projekte in Brüssel eingereicht.  ( 4 min )

Heute in c’t uplink sprechen wir über GPT-3 und andere KI-Sprachmodelle, die uns vielleicht arbeitslos machen – oder auch nicht.  ( 4 min )

The recently disclosed critical Spring4Shell vulnerability is being actively exploited by threat actors to execute the Mirai botnet malware, particularly in the Singapore region since the start of April 2022. "The exploitation allows threat actors to download the Mirai sample to the '/tmp' folder and execute them after permission change using 'chmod,'" Trend Micro researchers Deep Patel, Nitesh  ( 3 min )

Double-standard rules have strengthened iGiant's gatekeeper power Apple's ramp up in iOS privacy measures has affected small data brokers, yet apps can still collect group-oriented data and identify users via device fingerprinting, according to a study out of Oxford.…  ( 11 min )

Software giant sinkholes systems used by Russian gang Microsoft this week seized seven internet domains run by Russia-linked threat group Strontium, which was using the infrastructure to target Ukrainian institutions as well as think tanks in the US and EU, apparently to support Russian's invasion of its neighbor.…  ( 8 min )

Goodness, gracious, lots of insights on great balls of fire The US Space Force is publicly releasing nearly 30 years of data on fireball meteors in the hopes it can improve the detection and impact prediction of near-Earth objects (NEOs).…  ( 8 min )

Special method for production gets cash injection from govt, vendors New techniques for producing lithium could play a vital part in making batteries for applications ranging from smartphones to electric vehicles that are more environmentally friendly than current methods of extraction.…  ( 8 min )

Some fear they'll lose workstation sales to Lenovo, AMD's exclusive launch partner for the T Pro 5000 If you've been on the hunt for a pre-built workstation with AMD's Ryzen Threadripper processors, there's a chance you've noticed fewer options available and longer lead times from different PC system builders.…  ( 11 min )

12 years on, rebates-for-not-using-AMD-chips case isn't over yet... The European Commission (EC) is going ahead with an appeal against a court decision earlier this year to drop a $1.2 billion fine imposed against Intel for anti-competitive behavior.…  ( 8 min )

Default user gone, Bluetooth pairing during setup, and latest LTS Linux kernel An update to the Debian Bullseye-based Raspberry Pi OS is being rolled out with both quality-of-life improvements and one very important tweak: an overdue departure of the default user.…  ( 8 min )

Remember warning about hurried release to meet Brexit deadline? Never forget Updated  A system vital to the flow of goods across the UK's border has suffered a devastating outage following a rush to implement it in time for the Brexit deadline.…  ( 9 min )

Agency upset YouTube hasn't removed 'fake' videos about activities it won't call 'war' Russia's communications scold is fed up with all the misinformation online, at least with regard to Google and its YouTube subsidiary.…  ( 8 min )

This week's column coming to you via hologram. Or a spaceship Something for the Weekend  How can you tell if a fish is upset? It doesn't grind its pharyngeal teeth, clench its fins or utter moist oaths. And it's not as if you can see tears streaming down its face.…  ( 10 min )

Standard grants access to public hotspots without having to register each time The Wireless Broadband Alliance (WBA) has completed testing to prepare for the deployment of WBA OpenRoaming, a federation service built to give seamless access to Wi-Fi hotspots across Europe's municipal networks.…  ( 8 min )

Google says Topaz will lower latency, even though both nations already have shorter routes to bit barns Google has revealed it will fund a submarine cable connecting Japan and Canada.…  ( 8 min )

CWU wants 10% for members, cites biting inflation rises in UK The Communication Workers Union is lining up an industrial action ballot for members working at BT after rejecting the telecom company's offer of a flat rate £1,500 pay rise for 58,000 frontline workers.…  ( 9 min )

Beijing may have had a hand in attacks in Ukraine, too China has been accused of conducting a long-term cyber attack on India's power grid, and has been implicated in cyber attacks against targets in Ukraine.…  ( 8 min )

Back up your data, it's later than you think On Call  It's a tale from before the times of Bitlocker and TPM in On Call today as a Register reader demonstrates the importance of knowing one's true worth.…  ( 7 min )

'Opaque and difficult' Google Ad rules cost biz 20 hours profit Google has failed in its bid to dismiss a €150 million fine ordered by France's monopoly watchdog in 2019 for exploiting its position in the search advertising market, a court ruled on Thursday.…  ( 7 min )

Office 365 and Windows 365 prices to rise in September – one SKU by much more than recent commercial increase Microsoft has hiked the price of Office 365 and Windows 365 versions it offers to non-profit customers, effective September 1, 2022.…  ( 8 min )

For now, a mere 80 million more citizens can trial the Digital Yuan China's central bank digital currency, the Digital Yuan, has been integrated with Tencent's flagship messaging app WeChat, and appears as a payment option when users employ the super-app shop.…  ( 7 min )

Appoints independent committee and gives angry investors most of what they want Toshiba has decided it will consider proposals to take the company private, and devise yet another strategy to improve its performance, suggesting alternative proposals for the company's future will be revealed – and perhaps decided - in late June.…  ( 7 min )

He's the third gangster in crew to face time behind bars Another member of notorious cybercrime ring FIN7 is headed to jail after the gang breached major companies' networks across the US and stole more than $1 billion from these businesses' customers.…  ( 8 min )

Automated HR in the cross-hairs over discrimination law A newly proposed amendment to California's hiring discrimination laws would make AI-powered employment decision-making software a source of legal liability. …  ( 8 min )

American automotive tools manufacturer Snap-on announced a data breach exposing associate and franchisee data after the Conti ransomware gang began leaking the company's data in March. [...]  ( 4 min )

Microsoft has reminded customers today that multiple editions of Windows 10 20H2 and Windows 10 1909 are reaching the end of service (EOS) on May 10, 2022. [...]  ( 4 min )

GitHub can now block and alert you of pull requests that introduce new dependencies impacted by known supply chain vulnerabilities. [...]  ( 3 min )

The Mirai malware is now leveraging the Spring4Shell exploit to infect vulnerable web servers and recruit them for DDoS (distributed denial of service) attacks. [...]  ( 4 min )

Today, the U.S. has announced exemptions on previously imposed sanctions on Russia related to telecommunications and internet-based communications, likely to prevent Russians from being isolated from Western news sources. [...]  ( 4 min )

An update to Raspberry Pi OS Bullseye has removed the default 'pi' user to make it harder for attackers to find and compromise Internet-exposed Raspberry Pi devices using default credentials. [...]  ( 4 min )

Microsoft has successfully disrupted attacks against Ukrainian targets coordinated by the Russian APT28 hacking group after taking down seven domains used as attack infrastructure. [...]  ( 3 min )

To create sustainable business impact, AI capabilities need to be tailored and optimized to an industry or organization’s specific requirements and infrastructure model. Hear how customers’ challenges across industries can be addressed in any compute environment from the cloud to the edge with end-to-end hardware and software optimization. About the speakers Kavitha Prasad, VP &…  ( 3 min )

The use of AI in finance is gaining traction as organizations realize the advantages of using algorithms to streamline and improve the accuracy of financial tasks. Step through use cases that examine how AI can be used to minimize financial risk, maximize financial returns, optimize venture capital funding by connecting entrepreneurs to the right investors;…  ( 3 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. How a Zambian morgue is exposing the real covid toll in Africa The morgue at Lusaka’s University Teaching Hospital (UTH), near the center of Zambia’s capital, is not the most pleasant place to…  ( 4 min )

The morgue at Lusaka’s University Teaching Hospital (UTH), a sprawling brick facility near the center of Zambia’s capital, is not the most pleasant place to carry out a clinical study. Inside the cavernous interior, newly arrived bodies linger unattended—on rolling metal tables or on the concrete floor wrapped in blankets. Others lie stacked on open-air…  ( 10 min )

China-linked adversaries have been attributed to an ongoing onslaught against Indian power grid organizations, one year after a concerted campaign targeting critical infrastructure in the country came to light. Most of the intrusions involved a modular backdoor named ShadowPad, according to Recorded Future's Insikt Group, a sophisticated remote access trojan which has been dubbed a "masterpiece  ( 4 min )

Cybersecurity researchers have uncovered further links between BlackCat (aka AlphaV) and BlackMatter ransomware families, the former of which emerged as a replacement following international scrutiny last year. "At least some members of the new BlackCat group have links to the BlackMatter group, because they modified and reused a custom exfiltration tool [...] and which has only been observed in  ( 3 min )

A 32-year-old Ukrainian national has been sentenced to five years in prison in the U.S. for the individual's criminal work as a "high-level hacker" in the financially motivated group FIN7. Denys Iarmak, who worked as a penetration tester for the cartel from November 2016 through November 2018, had been previously arrested in Bangkok, Thailand in November 2019, before being extradited to the U.S.  ( 3 min )

Microsoft on Thursday disclosed that it obtained a court order to take control of seven domains used by APT28, a state-sponsored group operated by Russia's military intelligence service, with the goal of neutralizing its attacks on Ukraine. "We have since re-directed these domains to a sinkhole controlled by Microsoft, enabling us to mitigate Strontium's current use of these domains and enable  ( 4 min )

A number of rogue Android apps that have been cumulatively installed from the official Google Play Store more than 50,000 times are being used to target banks and other financial entities. The rental banking trojan, dubbed Octo, is said to be a rebrand of another Android malware called ExobotCompact, which, in turn, is a "lite" replacement for its Exobot predecessor, Dutch mobile security firm  ( 4 min )

Apple tritt Bedenken über die Bevorzugung eigener iPhone-Apps entgegen. Die Lobby-Ausgaben in Europa hat der Konzern inzwischen offenbar verdoppelt.  ( 4 min )

Unsere Übersicht kleiner, aber interessanter Meldungen enthält diese Woche unter anderem BMC, Mainframe, Eclipse IoT, Cython, Emacs, Laravel, Rome und DataGrip.  ( 4 min )

BigLake soll Googles zentrale Datenplattform werden und Analytik strukturierter sowie unstrukturierter Daten unter ein gemeinsames Dach bringen.  ( 3 min )

Vor sieben Jahren sorgte die FIN7-Gruppe mit dem größten Cyber-Raubzug für Schlagzeilen, danach blieb sie aktiv. Nun wurde ein drittes Mitglied verurteilt.  ( 4 min )

Die Berliner Datenschutzbeauftragte hat den Senat aufgefordert, Facebook-Fanpages abzuschalten. Grundlage ist ein Gutachten der deutschen Datenschutzbehörden.  ( 3 min )

Die Vorabversion des Plug-ins von Couchbase bietet bereits erste Optionen zum Bearbeiten und Löschen von Datenbankinhalten über die Entwicklungsumgebung.  ( 4 min )

Der Compiler bietet eine Anbindung an die sourcebasierte Codeabdeckung von LLVM. Außerdem stolpert die Sprache nicht mehr über scheinbar negative Zeitspannen.  ( 5 min )

Mit wenigen Mitteln und effizienten Maßnahmen lassen sich Social-Media-Auftritte professioneller gestalten. Der Workshop liefert praxisnah das nötige Rüstzeug.  ( 4 min )

In der Ukraine sind in den vergangenen Wochen tausende Starlink-Antennen angekommen und installiert worden. Die US-Regierung organisiert die Lieferungen.  ( 4 min )

Ein halbes Jahrzehnt ist es her, dass Apple seine Strategie bei den Workstations radikal wechselte – spät, aber oho. Resultat sind die superschnellen ARM-Macs.  ( 4 min )

Alle sieben Vorträge der letztjährigen Online-Konferenz betterCode() Go stehen nun auf Vimeo sowohl als Paket als auch einzeln zum Kauf bereit.  ( 3 min )

Auf dem Mac kann nun die Shortcuts-App zur Automatisierung von Pages, Numbers und Keynote verwendet werden. Auch für iOS und iPadOS gibt es eine Aktualisierung.  ( 4 min )

Der im September 2022 startende Hochschulzertifikatskurs über das Datenschutzmanagement qualifiziert Teilnehmende zum Datenschutzbeauftragten.  ( 3 min )

Baden in Niederösterreich hat sich die BadenCard für den Wertstoffhof ausgedacht. Da der politische Druck groß war, baute man hastig eine Website: mit Folgen.  ( 8 min )

Das US-Tech-Unternehmen baut ein regionales Rechenzentrum von Weltklasse in Zentralmexiko. Es soll Kunden weltweit das gesamte Microsoft-Portfolio anbieten.  ( 4 min )

Data is among the most important things that make up a web application or a conventional native app. We need data to be able to see and perhaps understand the purpose of an application. In this article, we’ll look at another approach to obtaining data in an application that requires authentication or authorization using Next.js.  ( 6 min )

Good data is the bedrock of a self-service data consumption model, which in turn unlocks insights, analytics, personalization at scale through AI. Yet many organizations face immense challenges setting up a robust data foundation. Dive into a pragmatic perspective on abstracting the complexity and untangling the conflicts in data management for better AI. About the…  ( 2 min )

While digital accessibility awareness is growing — fueled by the rise of accessibility lawsuits, renewed efforts by the government, and diversity and inclusion initiatives—progress on making the internet more accessible to people with disabilities remains slow. Companies ranging from major health care corporations to small businesses with Shopify storefronts are struggling to make their websites…  ( 5 min )

In many areas of the world, environmental conditions are not conducive to traditional farming. Ensuring food security depends on continuous agricultural innovation, which has been part of the United Arab Emirates’ (UAE) mission since its founding, given the country’s arid conditions and little water. Smart Acres is one of the many companies exploring new sustainable…  ( 14 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Deception, exploited workers, and free cash: How Worldcoin recruited its first half a million test users On a sunny morning last December, Iyus Ruswandi, a 35-year-old furniture maker in the village of Gunungguruh,…  ( 5 min )

Plus: More financially motivated miscreants try to monetize invasion Facebook is fighting a surge in cyber-espionage attempts and misinformation campaigns related to the Russian invasion of Ukraine, according to a new report by parent group Meta.…  ( 8 min )

Equip Amazon rivals with flexible networking chips? Sounds Epyc With cloud service providers like Amazon Web Services increasingly building their own silicon, it's no surprise that large chip companies like Intel and AMD are trying to find new ways not just to remain relevant in the cloud but to become can't-miss vendors for next-generation architectures.…  ( 11 min )

Bundled version of Node.js simplifies executing downloaded code Adobe Creative Cloud Experience, a service installed via the Creative Cloud installer for Windows, includes a Node.js executable that can be abused to infect and compromise a victim's PC.…  ( 8 min )

Want that thing, but in a different color, and don't know the name? Multisearch has your back Google's latest feature is making its Lens visual search tool mingle with text for image searches for those difficult-to-describe vague queries.…  ( 9 min )

Datacenter operator with $2.3b value said to be discussing options a year after SPAC merger Datacenter operator Cyxtera is considering putting itself up for sale, according to reports.…  ( 8 min )

Fintech provider flaw could have hit dozens of U.S. banks, says Salt Security Salt Security spotted a vulnerability in a large fintech company's digital platform that would have granted attackers admin access to banking systems in addition to allowing them to transfer funds to their own accounts.…  ( 10 min )

Pressure on Congress to submit the America COMPETES Act ASAP The Biden administration wants the $52 billion CHIPS Act passed without delay, according to a classified briefing between senior officials and a bipartisan group of Congressional representatives.…  ( 8 min )

Improved defenses give organizations more room to negotiate but won't protect from lawsuits, says law firm An increased willingness on the part of enterprises to invest in cybersecurity may finally be starting to make a difference, according to US law giant BakerHostetler.…  ( 9 min )

Motion calls for repairability ratings and expected lifetime of products European lawmakers are voting in plenary on a Right to Repair resolution today amid calls for the initiative to go even further.…  ( 8 min )

Even notoriously tech averse stock market gambler can't resist piece of pandemic-boosted PC extravaganza Warren Buffett's Berkshire Hathaway has taken up a double-digit stake in PC and print biz HP Inc's stock worth about $4.2 billion, a move that sent the company's share price up by 10 percent.…  ( 8 min )

30-year-old software that first introduced Windows Registry and killed Real Mode Time flies whether you're having fun or simply trying to work out which Registry change left your system hopelessly borked, and before you know it, Windows 3.1 is turning 30.…  ( 8 min )

Semiconductor Alliance wants US R&D billions to be dished out fairly, broadly, objectively A newly formed group is calling for the US to ensure efforts and public funding to boost the nation's domestic semiconductor industry benefits a broad family of stakeholders, not just a few companies.…  ( 9 min )

No actual users harmed yet as dept tests safety of pushing water, telecoms services in single pipeline Parts of South Yorkshire are to get fiber broadband run through mains water pipes in a two-year trial to evaluate the viability of the technology for connecting more homes.…  ( 8 min )

Cicada's months-long global espionage campaign marks an expansion of team's capabilities A China-backed crew is said to be running a global espionage campaign against governments, religious groups, and non-governmental organizations (NGOs) by, in some cases, possibly exploiting a vulnerability in Microsoft Exchange servers.…  ( 9 min )

Optional update should apply to all users, says Vivaldi boss Microsoft's one-click default browser change under Windows 11 is being met with raised eyebrows from its browser rivals.…  ( 8 min )

Company cites data security and privacy as reasons for cleaning house Outdated apps will no longer be accessible on Androids that are either new or updated to the latest software starting November 1, thanks to a Google policy that was announced Wednesday.…  ( 7 min )

From serverless to server, yes! Cado Security says it has discovered a strain of malware specifically designed to run in AWS Lambda serverless environments and mine cryptocurrency.…  ( 11 min )

VIPER mission also bitten by tech supply chain woes Progress on NASA's Volatiles Investigating Polar Exploration Rover (VIPER) mission to search for useful chemicals at the Moon's South Pole has been delayed by two tech-related issues springing from the COVID-19 pandemic.…  ( 8 min )

It paints, it edits, it potentially misleads people with faked pictures OpenAI has provided its latest caption-to-image-generation model, dubbed DALL·E 2, to select users to test before it potentially opens up the technology for wider use. …  ( 8 min )

Meanwhile changes the name of its major customer-facing event – probably a coincidence VMware has revealed more critical bugs that impact five of its products, including the Cloud Foundation bundle it advances as the ideal way to build a hybrid multi-cloud.…  ( 9 min )

Foreign nationals who earn STEM PhDs stateside mostly stick around Most foreign nationals who earn STEM PhDs in the United States remain in the country many years after graduating, with the highest numbers among Chinese and Indian graduates, according to a report released this week from American policy think tank, the Center for Security and Emerging Technology (CSET).…  ( 8 min )

3D Investment Partners wants to sell, labels company a 'governance embarrassment for Japan' One of Toshiba’s largest shareholders has called upon the company's board to solicit bids to acquire all or part of the ailing Japanese giant.…  ( 8 min )

Inventors, assemble! India's attempts to turn itself into a global electronics manufacturing powerhouse appear to have stalled a little, with government data showing negligible growth in value of production and a reduction in exports. But the nation has also revealed a plan to improve matters: a supergroup of expats who will help grow its semiconductor industry.…  ( 8 min )

We talk to CEO about projectile-based implosion design British outfit First Light Fusion claims it has achieved nuclear fusion with an approach that could provide cheap, clean power.…  ( 9 min )

Lawsuit accuses Big Blue of cheating investors by shifting systems revenue to trendy cloud, mobile tech Special report  IBM has been sued by investors who claim the company under former CEO Ginni Rometty propped up its stock price and deceived shareholders by misclassifying revenues from its non-strategic mainframe business – and moving said sales to its strategic business segments – in violation of securities regulations.…  ( 12 min )

Who, what, when, how still to be worked out, ironically The Canadian government this week introduced a law bill that would force the likes of Google and Facebook to pay Canadian news publishers for using their articles online.…  ( 8 min )

Denys Iarmak, a Ukrainian member and a "pen tester for the FIN7 financially-motivated hacking group, was sentenced on Thursday to 5 years in prison for breaching victims' networks and stealing credit card information for roughly two years, between November 2016 and November 2018. [...]  ( 4 min )

Google has announced several key policy changes for Android application developers that will increase the security of users, Google Play, and the apps offered by the service. [...]  ( 5 min )

Security researchers have discovered the first malware specifically developed to target Amazon Web Services (AWS) Lambda cloud environments with cryptominers. [...]  ( 4 min )

A new TDS (Traffic Direction System) operation called Parrot has emerged in the wild, having already infected servers hosting 16,500 websites of universities, local governments, adult content platforms, and personal blogs. [...]  ( 4 min )

The Hamas-backed hacking group tracked as 'APT-C-23' was found catfishing Israeli officials working in defense, law, enforcement, and government agencies, ultimately leading to the deployment of new malware. [...]  ( 5 min )

Mobile malware analysts warn about a set of applications available on the Google Play Store, which collected sensitive user data from over 45 million devices. [...]  ( 5 min )

Apples Klage scheint keine abschreckende Wirkung zu zeigen: Im Dezember wurde das iPhone einer jordanischen Journalistin erneut mit Pegasus gehackt.  ( 4 min )

Die Systemverwaltungs-Suite Microsoft System Center erscheint als neue Langzeit-Version und ist an Windows Server 2020 und Azure Stack HCI adaptiert.  ( 3 min )

Ampeln, Stopp-Schilder, Maut-Straßen: Google implementiert neue Informationen in Maps. Teile der Neuerungen sollen bald auch schon in Deutschland laufen.  ( 4 min )

Intel macht seinen schnellsten Desktop-Prozessor noch schneller – preislich hat es der Core i9-12900KS jedoch in sich.  ( 3 min )

Suchmaschinenbetreiber wie Google müssen Anträge prüfen, die das Löschen von Links aus den Ergebnislisten fordern. Das meint ein Generalanwalt des EuGH.  ( 3 min )

Nachdem sie geblitzt wurden, müssen rund 3.000 Autofahrer wegen eines Hackerangriffs von 2021 im Landkreis Ludwigslust-Parchim keine Strafe zahlen.  ( 3 min )

Cisco warnt in mehreren Sicherheitsmeldungen vor Lücken in den Produkten. Außerdem listet das Unternehmen von der Spring-Framework-Lücke betroffene Lösungen.  ( 4 min )

Entwickler sind darüber verärgert, dass Twitter eingebettete, aber schon gelöschte Tweets nicht mehr anzeigt. Damit gehe eine Archivierungsfunktion verloren.  ( 3 min )

Die Abgeordneten wollen eine effizientere Ressourcennutzung fördern, Abfälle reduzieren und eine längere Nutzung von Produkten wie Smartphones unterstützen.  ( 4 min )

Russische iPhone-Nutzer können die App des verhafteten Putin-Kritikers wieder laden. Sie war nach Drohungen gegen Apple-Mitarbeiter entfernt worden.  ( 4 min )

Das jährliche Treffen der Samba-Entwickler findet auch dieses Jahr digital statt und ist kostenlos für Interessierte zugänglich. Das Programm steht bereits.  ( 3 min )

Mehrere VMware-Produkte sind von teils kritischen Lücken betroffen, durch die Angreifer Schadcode einschleusen könnten. Es gibt Updates und Gegenmaßnahmen.  ( 4 min )

An zwei Tagen analysieren Sie aktuelle Angriffstechniken, um die eigene Anfälligkeit und Schutzmaßnahmen besser bewerten zu können. Frühbucherrabatt bis 21.4.  ( 3 min )

Die eigene Kryptowährung "Diem" floppte, nun möchte Meta offenbar seine Finanzprodukte ausbauen. Im Gespräch sind verschiedene Zahlungsmittel für Meta-Apps.  ( 4 min )

US-Bundespolizei ist gegen ein Botnet vorgegangen, das tausende Netzwerkgeräte umfasste. USA und Großbritannien sind sich sicher, dass Russland dahintersteckt.  ( 4 min )

Nur 145 mm hoch trotz 120 mm großem Lüfter: Der NH-D12L wimmelt im Feld der Prozessorkühler mit 92 mm kleinen Lüftern, soll aber besser kühlen.  ( 4 min )

Der Nachfolger des KI-Systems von OpenAI kann nicht nur Bilder anhand von Beschreibungen erstellen, sondern sie auch ergänzen oder umgestalten.  ( 6 min )

PaLM bringt einen Qualitätssprung für große KI-Sprachmodelle: Es kann Code generieren, mit Arithmetik umgehen und Witze erklären. Google spricht von Durchbruch.  ( 7 min )

Neue Aufgaben für iPhone und iPad • macOS 12 auf alten Macs • Mac und iPad wachsen zusammen • Test: Mac Studio und Apple Studio Display, iPhone SE 3, iPad Air 5  ( 8 min )

heise Developer präsentiert software-architektur.tv, Eberhard Wolffs Videocast. Diesmal zu Gast: Jochen Christ, Simon Harrer und Theo Pack.  ( 3 min )

Interaktive Diagramme, ein veränderter Umgang mit angehängten Mediendateien sowie Performance-Verbesserungen sind Teil des neuen Release.  ( 4 min )

Lange ließ sich Teams zwar in Firefox starten, sobald ein Anruf anstand, war der Spaß jedoch vorbei. Nun rüstet Microsoft diese essenziellen Funktionen nach.  ( 3 min )

Die Breko-Einkaufsgemeinschaft bringt mit Gigaset einen Router auf den Markt, den Carrier ihren Kunden anbieten können. Weitere Modelle sind in der Pipeline.  ( 4 min )

Mehrere Produkte von Fortinet mit teils kritischen Sicherheitslücken ermöglichten Angreifern, etwa Schadcode einzuschleusen. Updates dichten die Lücken ab.  ( 4 min )

C++-Profis lernen an drei Tagen die großen Neuerungen in C++20 kennen und wie man sie effektiv in eigenen Projekten einsetzen kann. Einige Plätze frei.  ( 3 min )

Nach Ansicht der Verbraucherschützer verstößt Google mit seinem Design für die Cookie-Banner gegen "nationale Regelungen und EU-Vorgaben".  ( 4 min )

Durch Parks, Fußgängerzonen und andere Orte der Rheinmetropole sind aktuell Apples Kartenerfasser unterwegs. Die Fotos werden aber nicht online gehen.  ( 4 min )

Die neue Version der Linux-Distribution Deepin enthält viele kleinere Änderungen, die hauptsächlich den Arbeitsalltag erleichtern sollen.  ( 4 min )

Der IPv4-Nachfolger verbreitet sich langsam. Wir lassen uns erklären, warum das so lange dauert, was die Vorteile von IPv6 sind und was man selbst machen kann.  ( 4 min )

A first-of-its-kind malware targeting Amazon Web Services' (AWS) Lambda serverless computing platform has been discovered in the wild. Dubbed "Denonia" after the name of the domain it communicates with, "the malware uses newer address resolution techniques for command and control traffic to evade typical detection measures and virtual network access controls," Cado Labs researcher Matt Muir said  ( 3 min )

A threat actor with affiliations to the cyber warfare division of Hamas has been linked to an "elaborate campaign" targeting high-profile Israeli individuals employed in sensitive defense, law enforcement, and emergency services organizations. "The campaign operators use sophisticated social engineering techniques, ultimately aimed to deliver previously undocumented backdoors for Windows and  ( 4 min )

As many as seven malicious Android apps discovered on the Google Play Store masqueraded as antivirus solutions to deploy a banking trojan called SharkBot. "SharkBot steals credentials and banking information," Check Point researchers Alex Shamshur and Raman Ladutska said in a report shared with The Hacker News. "This malware implements a geofencing feature and evasion techniques, which makes it  ( 3 min )

During the last week of March, three major tech companies - Microsoft, Okta, and HubSpot - reported significant data breaches. DEV-0537, also known as LAPSUS$, performed the first two. This highly sophisticated group utilizes state-of-the-art attack vectors to great success. Meanwhile, the group behind the HubSpot breach was not disclosed. This blog will review the three breaches based on  ( 5 min )

Cybersecurity researchers have detailed a "simple but efficient" persistence mechanism adopted by a relatively nascent malware loader called Colibri, which has been observed deploying a Windows information stealer known as Vidar as part of a new campaign. "The attack starts with a malicious Word document deploying a Colibri bot that then delivers the Vidar Stealer," Malwarebytes Labs said in an  ( 3 min )

The U.S. Department of Justice (DoJ) announced that it neutralized Cyclops Blink, a modular botnet controlled by a threat actor known as Sandworm, which has been attributed to the Main Intelligence Directorate of the General Staff of the Armed Forces of the Russian Federation (GRU). "The operation copied and removed malware from vulnerable internet-connected firewall devices that Sandworm used  ( 3 min )

VMware has released security updates to patch eight vulnerabilities spanning its products, some of which could be exploited to launch remote code execution attacks. Tracked from CVE-2022-22954 to CVE-2022-22961 (CVSS scores: 5.3 - 9.8), the issues impact VMware Workspace ONE Access, VMware Identity Manager, VMware vRealize Automation, VMware Cloud Foundation, and vRealize Suite Lifecycle Manager  ( 3 min )

Cisco warnt in mehreren Sicherheitsmeldungen vor Lücken in den Produkten. Außerdem listet das Unternehmen von der Spring-Framework-Lücke betroffene Lösungen.  ( 4 min )

Mehrere VMware-Produkte sind von teils kritischen Lücken betroffen, durch die Angreifer Schadcode einschleusen könnten. Es gibt Updates und Gegenmaßnahmen.  ( 4 min )

Mehrere Produkte von Fortinet mit teils kritischen Sicherheitslücken ermöglichten Angreifern, etwa Schadcode einzuschleusen. Updates dichten die Lücken ab.  ( 4 min )

American cybersecurity company Palo Alto Networks warned customers on Wednesday that some of its firewall, VPN, and XDR products are vulnerable to a high severity OpenSSL infinite loop bug disclosed three weeks ago [...]  ( 3 min )

A new information stealer named FFDroider has emerged, stealing credentials and cookies stored in browsers to hijack victims' social media accounts. [...]  ( 4 min )

British retail chain The Works announced it was forced to shut down several stores due to till issues caused by a cyber-security incident involving unauthorized access to its computer systems. [...]  ( 3 min )

VMware has warned customers to immediately patch critical vulnerabilities in multiple products that could be used by threat actors to launch remote code execution attacks. [...]  ( 3 min )

An ongoing outage affects numerous Atlassian customers, causing their Jira and Confluence instances to not be accessible for over twenty-four hours. [...]  ( 4 min )

US government officials announced today the disruption of the Cyclops Blink botnet controlled by the Russian-backed Sandworm hacking group before being used in attacks. [...]  ( 4 min )

Microsoft has reminded customers that multiple .NET Framework versions signed using the insecure Secure Hash Algorithm 1 (SHA-1) will reach their end of life this month. [...]  ( 3 min )

AMD is investigating an issue in its GPU software suite that causes an auto-adjustment of AMD Ryzen CPU performance settings for users without permission. [...]  ( 4 min )

The U.S. Department of the Treasury's Office has announced sanctions against the cryptocurrency exchange Garantex, which has been linked to illegal transactions for Hydra Market. [...]  ( 4 min )

US chipmaker Intel announced Tuesday night that it had suspended all business operations in Russia, joining tech other companies who pulled out of the country due to the invasion of Ukraine. [...]  ( 3 min )

The Australian Competition & Consumer Commission has published an announcement to raise awareness about a spike in money recovery scams. [...]  ( 4 min )

One hopes they can stay online long enough for customers to evaluate Atlassian opened its Las Vegas Team '22 event this week with products aimed at giving management an insight into projects – and developers an insight into what is actually going on.…  ( 8 min )

Sensitive info swiped from Windows and Android devices, according to report A prolific Middle East team with links to Hamas is said to be using malware and infrastructure to target high-ranking Israeli officials and steal sensitive data from Windows and Android devices.…  ( 9 min )

'Routine maintenance script' blamed for derailed service for unlucky customers Atlassian's Jira and Confluence issue tracking and collaboration services have been down for some customers for two days now and the outage remains ongoing.…  ( 8 min )

Control systems scrubbed, hijacked network devices need to be patched and cleaned The US Justice Department today revealed details of a court-authorized take-down of command-and-control systems the Sandworm cyber-crime ring used to direct network devices infected by its Cyclops Blink malware.…  ( 8 min )

A new arms race emerges DARPA announced a second successful test of its hypersonic cruise missile, adding that the weapon, capable of speeds in excess of Mach 5, is ready for real-world use. …  ( 8 min )

Pieter Abbeel may not be a name you know, but you've probably heard of his work This year's ACM Prize in Computing is going toward a machine learning specialist whose work, even if you haven't heard of him, is likely to be familiar.…  ( 7 min )

Hoarding a bunch of data that 'may prove useful' someday? Data-wrangling product is aimed at you Google has announced a preview on Google Cloud of BigLake, a data lake storage service that it claims can remove data limits by combining data lakes and data warehouses.…  ( 8 min )

DevOps platform tells devs it is ‘continuing to work on a longer-term fix’ DevOps outfit CircleCI is suffering from performance issues that have been ongoing for most of the day, with developers left waiting for the platform to come back online.…  ( 8 min )

Leak highlights worker offboarding policies as SaaS use grows A former employee with Block used the digital financial services firm's Cash App products to access and download personal information about US customers in December 2021, the firm has claimed.…  ( 10 min )

Points to on-prem pain with legacy systems, rising maintenance costs Boeing has decided that when it comes to the cloud there's no reason to limit itself to just one of the big public cloud players, so instead it chose all three.…  ( 8 min )

Service 'likely to have a significant impact on market for provision of broadband internet access' France's Conseil d'Etat court is revoking the license [PDF] authorizing Elon Musk's Starlink outfit to use two frequency bands to provide satellite internet in France.…  ( 8 min )

The same architecture as the top-ranked "Fugaku" supercomputer with services bundled Fujitsu has confirmed it will be opening access to the same system architecture underpinning the global top supercomputer, "Fugaku" via an emerging cloud service.…  ( 9 min )

Pop quiz: you've got your own edge computer in space. What do you do with it? Microsoft is making a deal with satellite infrastructure outfit Loft Orbital to integrate some of the Windows-maker's cloud technology.…  ( 9 min )

Some 1,200 of chipmaker's employees based in Russia, a country accounting for 0.1% of global chip sales in 2021 Intel is temporarily halting all business operations in Russia following the decision a little more than a month ago to pause sales to both Russia and its puppet state Belarus.…  ( 8 min )

Cramming a full Windows desktop into a teeny tiny space Windows 10 – as we pointed out last week – still rules Microsoft's user base, as now evidenced by the latest arrival of Windows 10 IoT Enterprise on NXP hardware.…  ( 8 min )

Is that... a good or bad thing? Deep-learning algorithms have shown themselves equal to humans in detecting patients at high-risk of developing Type-2 diabetes by analyzing CT scans of their pancreases, according to a research paper published on Tuesday.…  ( 8 min )

Plus: Big Tech company pays a little bit more tax shock Spare a thought for Microsoft's British tentacle. It reported surging local revenues for fiscal 2021 yet profits shrunk, according to financial accounts.…  ( 8 min )

So says High Court after appeal from rights org dismissed A privacy rights org this week lost an appeal [PDF] in a case about the sharing of Bulk Personal Datasets (BPDs) by MI5, MI6, and GCHQ with foreign intelligence agencies.…  ( 11 min )

About 35-40 per cent of iGiant's desktop OS installs potentially vulnerable, says Intego Apple last week patched two actively exploited vulnerabilities in macOS Monterey yet has left users of older supported versions of its desktop operating system unprotected.…  ( 9 min )

Regulator rules ban on in-app links to payment options that don't touch the Play Store is not in the spirit of the law South Korea's Communications Commission has determined that Google has not complied with the nation's law – the first of its kind in the world – requiring operators of app stores to allow third-party payments.…  ( 8 min )

Increases regulation on operators to stop money laundering and terror funding Singapore's Monetary Authority (MAS) has opined that all transactions involving digital tokens carry higher inherent money laundering and terrorist funding risks, and introduced new regulations so that local players are less likely to facilitate such crimes.…  ( 8 min )

US has over half the market, Japan is a tale of woe China finished 2021 holding just four per cent of global semiconductor market, research firm IC Insights stated on Tuesday.…  ( 8 min )

Drones, delivery-bots and robo-sprayers at work in locked-down megacity State-controlled media in China is proudly reporting the use of robots to facilitate the “temporary closed-off management” of Shanghai, which has experienced a new surge of COVID.…  ( 8 min )

'Just the beginning of our Windows and Microsoft cloud integration' says Windows boss Microsoft has revealed plans to make cloudy Windows 11 PCs easily available from, and integrated with, its flagship OS on physical PCs, and hinted at much more integration between Redmond's desktop operating system and its clouds.…  ( 9 min )

US also charges Russia-based web host owner regarding cyber-crime market US and German federal agencies came down hard on Hydra, the longest-running known dark-web marketplace trafficking in illegal drugs and money-laundering services, with a multi-pronged attack that aimed to cut off multiple heads of the nefarious online beast.…  ( 8 min )

Amazingly SpaceX isn't on the list Amazon's proposed broadband satellite constellation, Project Kuiper, has inched closer to making it into orbit, even if some of the rockets it intends to use have yet to take their first flights.…  ( 8 min )

Apples AirTag-Tracker werden den Protokollen zufolge hauptsächlich für Diebstähle und Stalking zweckentfremdet, wobei wohl vor allem Frauen zum Ziel werden.  ( 4 min )

Ein Leitfaden soll Nutzer von Google Chrome durch die Einstellungen zum Datenschutz führen. In den nächsten Wochen soll der Leitfaden im Browser verfügbar sein.  ( 3 min )

Atlassian stellt vier neue Tools vor. Ein Data Lake bündelt künftig Daten aus allen Atlassian-Anwendungen, Teams und Entwickler sollen noch effizienter werden.  ( 4 min )

Der Zeitplan für das große Update der Blogsoftware steht fest, auch, wie es aussehen soll. Erst einmal haben die Entwickler in Version 5.9.3 Fehler behoben.  ( 4 min )

Spieletaugliche Grafikkarten kosten nicht mehr unbedingt ein Vermögen – erste Modelle von AMD und Nvidia halten sich sogar an die offiziellen Preisempfehlungen.  ( 5 min )

Aktiv ausgenutzte Lücken hat Apple nur in iOS 15 und macOS 12 gestopft. Sicherheitsforschern zufolge sind aber auch ältere Betriebssystemversionen verwundbar.  ( 4 min )

In Cookie-Bannern muss man sich oft durch zahlreiche Ebenen klicken. Das soll jetzt zumindest bei Google ein Ende haben, sagt Hamburgs Datenschützer.  ( 3 min )

In Tails 4.29 haben die Maintainer die zentralen Anwendungen aktualisiert. Die Beta von Tails 5.0 liefert jedoch einen Ausblick in die Zukunft.  ( 4 min )

Die nächste Edition der Programmiersprache soll einfacher zu lernen sein und Erweiterungen für das Async/Await-Pattern mitbringen.  ( 5 min )

Die Online-Konferenz zur Web-API-Entwicklung findet am 27. April 2022 statt. Noch gilt der Frühbucherrabatt, durch den man ordentlich sparen kann.  ( 4 min )

Das ETL-Framework soll Data Engineers das aufwendige Erstellen, Betreiben und Warten von Daten-Pipelines erleichtern.  ( 4 min )

Da es für die Verarbeitung personenbezogener Daten von Facebook-Fanpages keine wirksame Rechtsgrundlage gibt, sollen Landesbehörden ihre Fanseiten abschalten.  ( 3 min )

Wer einen Desktop-PCs mit Ryzen-Prozessor und Radeon-Grafikkarte verwendet, sollte ein Blick auf die BIOS-Einstellungen werfen. Die CPU könnte übertaktet sein.  ( 4 min )

Welche Programmiersprachen nutzen Hacker und Cracker? Ergebnisse des ersten quantitativen Survey bei Deutschlands größter Organisation für Informationsfreiheit.  ( 7 min )

Hier beschreiben wir, worum es geht: Unterrichten. Ein Fokus, der viele hier veröffentlichte Beiträge prägt und über dessen Relevanz sich fast alle einig sind.  ( 5 min )

Programmier-Erfahrene in anderen Sprachen erhalten an drei Tagen einen umfassenden, praxisorientierten Einstieg in Python. Noch einige Plätze frei.  ( 3 min )

Mit dem Update des Webbrowsers Vivaldi ist die Suchmaschine Qwant integriert. Außerdem soll eine Datenschutz-Statistik Informationen zum Werbetracking liefern.  ( 4 min )

Bestimmten Apps ist es erlaubt, ihre Abokosten ohne Opt-in durch den Nutzer zu erhöhen. Das sei "ein Versuch", bestätigte Apple.  ( 4 min )

Neue Aufgaben für iPhone und iPad • macOS 12 auf alten Macs • Mac und iPad wachsen zusammen • Test: Mac Studio und Apple Studio Display, iPhone SE 3, iPad Air 5  ( 8 min )

Zum Android-Patchday im April behebt Google zahlreiche sicherheitsrelevante Fehler. Die meisten betreffen Qualcomm-SoCs.  ( 3 min )

Lernen Sie die Vorteile von Azure AD kennen: Mit Active Directory aus der Cloud hybride Identitäten sicher verwalten. 10 Prozent Frühbucherrabatt bis 20.4.  ( 3 min )

Die World Wide Developers Conference wird trotz abklingender Pandemie erneut nicht live stattfinden. Das Online-Event startet am 6. Juni mit einer Keynote.  ( 4 min )

On a sunny morning last December, Iyus Ruswandi, a 35-year-old furniture maker in the village of Gunungguruh, Indonesia, was woken up early by his mother. A technology company was holding some kind of “social assistance giveaway” at the local Islamic elementary school, she said, and she urged him to go. Ruswandi joined a long line…  ( 24 min )

When OpenAI revealed its picture-making neural network DALL-E in early 2021, the program’s human-like ability to combine different concepts in new ways was striking. The string of images that DALL-E produced on demand were surreal and cartoonish, but they showed that the AI had learned key lessons about how the world fits together. DALL-E’s avocado…  ( 7 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. A battle is raging over long covid in children Before Jasmin got covid-19 last year, she was an especially active 10-year-old. She loved dancing, swimming, and gymnastics. “She was always upside-down, doing handstands,”…  ( 4 min )

Before Jasmin got covid-19 last year, she was an especially active 10-year-old. She loved dancing, swimming, and gymnastics. “She was always upside-down, doing handstands,” says her mother, Binita Kane. Although she only had a mild case of the virus, she developed lasting, debilitating symptoms that kept her out of school. Jasmin, now 11, has abandoned…  ( 9 min )

Communication is a vital skill for any leader at an organization, regardless of seniority. For security leaders, this goes double. Communicating clearly works on multiple levels. On the one hand, security leaders and CISOs must be able to communicate strategies clearly – instructions, incident response plans, and security policies. On the other, they must be able to communicate the importance of  ( 4 min )

Threat actors have been distributing malicious applications under the guise of seemingly harmless shopping apps to target customers of eight Malaysian banks since at least November 2021. The attacks involved setting up fraudulent but legitimate-looking websites to trick users into downloading the apps, Slovak cybersecurity firm ESET said in a report shared with The Hacker News. The copycat  ( 3 min )

Ukraine's technical security and intelligence service is warning of a new wave of cyber attacks that are aimed at gaining access to users' Telegram accounts. "The criminals sent messages with malicious links to the Telegram website in order to gain unauthorized access to the records, including the possibility to transfer a one-time code from SMS," the State Service of Special Communication and  ( 3 min )

Block, the company formerly known as Square, has disclosed a data breach that involved a former employee downloading unspecified reports pertaining to its Cash App Investing that contained information about its U.S. customers. "While this employee had regular access to these reports as part of their past job responsibilities, in this instance these reports were accessed without permission after  ( 3 min )

The U.S. Treasury Department on Tuesday sanctioned Hydra, the same day German law enforcement authorities disrupted the world's largest and longest-running dark web marketplace following a coordinated operation in partnership with U.S. officials. The sanctions are part of an "international effort to disrupt proliferation of malicious cybercrime services, dangerous drugs, and other illegal  ( 4 min )

In this series of articles, we highlight design patterns and techniques to design better interfaces. You can also find more examples in [“Smart Interface Design Patterns”](https://smart-interface-design-patterns.com/), a 6h-video course with 100s of hand-picked examples, curated by Vitaly.  ( 23 min )

[Devs For Ukraine](https://www.devsforukraine.io/) is a free online charity conference organized by the lovely people at Remote. Two days filled with talks from engineering leaders around the globe, in support of Ukraine. April 25–26.  ( 1 min )

Zum Android-Patchday im April behebt Google zahlreiche sicherheitsrelevante Fehler. Die meisten betreffen Qualcomm-SoCs.  ( 3 min )

Some in tech industry are ecstatic: 'A historic step forward' and timing 'couldn't be any better' The US State Department this week launched an agency responsible for developing online defense and privacy-protection policies and direction as the Biden administration seeks to integrate cybersecurity into America's foreign relations.  …  ( 11 min )

Filter list reportedly would block 'living wage,' 'pay rises,' 'restroom,' etc Amazon allegedly planned an internal messaging app that filtered words like "union," "pay rise," and "ethics," alongside challenging and offensive terms, but after public disclosure of the project, the biz told The Register the software has not been approved and may never be deployed.…  ( 9 min )

Not just about revenue figures, we're told: Investment in staff and services matters, too Exclusive  While Nvidia is becoming a vertically integrated business by owning several core computing technologies, the GPU giant still relies on third-party companies to sell most of its wares, which is why it goes to great lengths to incentivize and recognize the contributions of these partners.…  ( 9 min )

I'm sorry, Dave, I'm afraid you can't go out dressed like that Video  From the department of "we've got this supercomputer on the space station, what shall we do with it?" comes news of AI technology being used to check the gloves of spacewalkers.…  ( 8 min )

Updates inspected for security blunders before some git can exploit them GitHub is aiming to help users avoid inadvertent leaks of confidential objects like access tokens by scanning repository content for such secrets before a git push is executed.…  ( 8 min )

Millions of rows per second in real time, so the legend goes... A data analytics company claiming to be able to process millions of rows per second, in real time, has just closed out a Series A funding round to take-in $37 million.…  ( 7 min )

US sanctions force company to sell Honor and x86 units, current and retired staff bask in those profits Flush from the sale of various business units, Huawei has distributed a whopping $9.65 billion dividend to current and retired staff under its Employee Shareholders Scheme (ESS).…  ( 8 min )

RUSI argues for collaboration, while others note all 'scans' compromise secure encryption End-to-end encryption (E2EE) has become a global flashpoint in the ongoing debate between the security of private communications versus the need of law enforcement agencies to protect the public from criminals.…  ( 9 min )

Technology is one part of a larger jam-resistant satellite scheme, important for warfare Boeing has hit a milestone with its anti-jam satellite communications.…  ( 8 min )

Gelsinger's firm drops details on crypto chip – including hash rate of up to 580GHps Intel has disclosed more details of its Blockscale ASIC, the firm's entry into the realm of cryptocurrency mining with a dedicated chip built to provide users with energy-efficient hashing for proof-of-work consensus networks.…  ( 8 min )

Syria, Sudan, Belarus, Ukraine came top. Are you starting to see a pattern? In an analysis of 3,356 fixed-line broadband deals in 220 countries, price comparison website Cable.co.uk found that the UK has the 92nd cheapest internet, beating the US, which came in 134th place.…  ( 8 min )

Linux slinger's gear can now look after ███ ███ ███ in secure ███ ███ Linux slinger Red Hat has achieved Common Criteria certification for Red Hat Enterprise Linux 8.2.…  ( 8 min )

For this energy-efficient mega-PaLM, you gotta hand it to them Though AI models will continue to get increasingly more powerful the larger they become, performance improvements from scale have not yet plateaued, according to researchers at Google.…  ( 9 min )

Big iron also claimed to be 'quantum-safe' to protect against future hacks IBM has lifted the covers off the z16, the newest member of its Z Series mainframe family which focuses on the financial services industry with a new processor that has built-in AI acceleration for real-time fraud detection.…  ( 10 min )

Judge ponders battle royale between all three to avoid unhelpful overlaps Proceedings in the legal dispute between Epic Games and Apple have bogged down in Australia, and won't reach a courtroom until 2024.…  ( 9 min )

Move is supposed to be double-plus good for supply-chain security Google is planning to tighten the security around its open source Go programming language by requiring two Google employees to be involved in code changes, where previously only one approver needed to be company-affiliated.…  ( 9 min )

Customers in Indonesia promised warning of wobbles sooner than is otherwise possible Xiaomi has added an earthquake alert system to some of its smartphones, starting with a trial in Indonesia, as a result of a collaboration between the smartphone maker and Indonesian and Chinese government-supported agencies.…  ( 9 min )

Crooks used RAT to hijack superusers at India's Mahesh Bank, stole millions An Indian bank that did not have a valid firewall license, had not employed phishing protection, lacked an intrusion detection system and eschewed use of any intrusion prevention system has, shockingly, been compromised by criminals who made off with millions of rupees.…  ( 8 min )

This matters for China – and for HPE, Intel … and possibly Apple A consortium led by Chinese government-backed Beijing Jianguang Asset Management Co. Ltd (JAC Capital) has injected $9.4 billion into ailing Chinese chipmaker Tsinghua Unigroup, in a deal that will be appreciated by many big tech industry players.…  ( 8 min )

'Up to 50%' better price-performance than x86 equivalents claimed Microsoft claims its latest Arm-powered Azure virtual machines can provide up to 50 percent better price-performance than similar instances using x86 processors.…  ( 9 min )

'Up to 50%' better price-performance than x86 equivalents ... Well, 2% is still up to 50%, we guess Microsoft claims its latest Arm-powered Azure virtual machines can provide up to 50 percent better price-performance than similar instances using x86 processors. The keywords here are "up to" as it matters whether or not you're relying on hyperthreading on the x86 systems.…  ( 9 min )

Staff socially engineered into handing over internal system credentials Mailchimp has confirmed a miscreant gained access to one of its internal tools and used it to steal data belonging to 100-plus high-value customers.…  ( 9 min )

Everything's bigger in Texas, even the flying package-slinging robots Wing will this Thursday launch a commercial drone delivery service in a major US metropolitan area, a first for the Alphabet-owned startup.…  ( 8 min )

Cash App is notifying 8.2 million current and former US customers of a data breach after a former employee accessed their account information. [...]  ( 3 min )

Security researchers have uncovered a long-running malicious campaign from hackers associated with the Chinese government who are using VLC Media Player to launch a custom malware loader. [...]  ( 4 min )

Roughly one out of six organizations worldwide that are impacted by the Spring4Shell zero-day vulnerability have already been targeted by threat actors, according to statistics from one cybersecurity company. [...]  ( 3 min )

Microsoft said that it's currently tracking a "low volume of exploit attempts" targeting the critical Spring4Shell (aka SpringShell) remote code execution (RCE) vulnerability across its cloud services. [...]  ( 3 min )

Microsoft has announced that Exchange, SharePoint, and Skype for Business on-premises are now part of the Applications and On-Premises Servers Bounty Program starting today. [...]  ( 3 min )

Microsoft has revealed that Window 365, the company's virtualized desktop service, will get support for new features to make it easier to use log into and work with Cloud PCs from any device. [...]  ( 3 min )

Microsoft has unveiled new Windows 11 features at today's 'Windows Powers the Future of Hybrid Work' event, including a redesigned File Explorer, new accessibility features, Focus for Windows 11, and more. [...]  ( 5 min )

Microsoft says that Windows 11 will get more security improvements in upcoming releases, which will add more protection against cybersecurity threats, offer better encryption, and block malicious apps and drivers. [...]  ( 4 min )

Microsoft has resolved a newly acknowledged issue causing Windows apps that use WebView2 to render Internet content incorrectly outside their windows after installing this month's optional preview cumulative updates.  [...]  ( 3 min )

The Computer Emergency Response Team of Ukraine (CERT-UA) has spotted new phishing attempts attributed to the Russian threat group tracked as Armageddon (Gamaredon). [...]  ( 4 min )

Microsoft has removed a compatibility hold blocking Windows 11 upgrades for Windows 10 customers after fixing a known issue leading to problems importing Internet Explorer 11 (IE11) data into Microsoft Edge. [...]  ( 3 min )

The servers of Hydra Market, the most prominent Russian darknet platform for selling drugs and money laundering, have been seized by the German police. [...]  ( 3 min )

A new WhatsApp phishing campaign impersonating WhatsApp's voice message feature has been discovered, attempting to spread information-stealing malware to at least 27,655 email addresses. [...]  ( 4 min )

Mit der Version 99 ermöglicht Firefox seinen Nutzern unter anderem, Kreditkarteninformationen im Browser zu hinterlegen und ergänzt einen Vorlese-Shortcut.  ( 4 min )

Intel wechselt bei seiner zweiten ASIC-Generation fürs Bitcoin-Mining von der eigenen Intel-4-Fertigung zu TSMCs 5 nm – die Chips werden so konkurrenzfähig.  ( 4 min )

Neue Windows Features rund um Sicherheit und Cloud sind die Hauptthemen für eine hybride Arbeitswelt zwischen Büro und Homeoffice.  ( 5 min )

Im Juni startet die Minds Mastering Machines wieder vor Ort mit 36 Vorträgen rund um aktuelle ML-Themen. Frühbuchertickets gibt es bis zum 11. April.  ( 4 min )

Der Chef von Twitter, Parag Agrawal, hat Elon Musk im Verwaltungsrat aufgenommen. Erst seit Kurzem ist Musk größter Aktionär des Unternehmens.  ( 3 min )

Facebook-Mutterkonzern Meta hat Hashtags blockiert, die mit den Gräueltaten in Butscha zusammenhingen. Mittlerweile habe Meta die Hashtags wieder freigegeben.  ( 3 min )

Die Rust Foundation stellt mit dem neuen Community Grants Program 2022 einen Mechanismus bereit, um die Rust-Entwicklergemeinde bei der Arbeit zu unterstützen.  ( 6 min )

Microsoft setzt mit dem Release auf mehr Sicherheit sowie verbessertes Dependency Management, und unterstützt beim Erstellen produktionsreifer Anwendungen.  ( 4 min )

Sechs Prozent der 16- bis 75-Jährigen hierzulande sind ohne Internet. EU-weit belegt Deutschland damit den vierten Platz, teilt das Statistische Bundesamt mit.  ( 4 min )

James Phillips verlässt Microsoft. Zuletzt leitete er die Abteilung, die sich vor allem mit KI- und Cloud-Produkten des Unternehmens beschäftigt.  ( 3 min )

Ein neuer Schub an Ryzen-Prozessoren für AMDs AM4-Plattform ist im deutschen Handel gelandet, darunter der Ryzen 5 5600. Die Ryzen-9-CPUs sind jetzt günstiger.  ( 4 min )

Nach dem Erfolg der hauseigenen Graviton-Prozessoren in der Amazon-Cloud bietet Microsoft jetzt VMs mit dem 80-Kerner Ampere Altra an.  ( 3 min )

Neben Erweiterungen für den Compiler bringt das Release eine Vorschau auf generische Typen, die auf keinen Fall Null sind, und Context Receivers.  ( 6 min )

Nach einem Einbruch beim Marketing-Mail-Anbieter MailChimp haben Cyberkriminelle versucht, per Phishing an Kryptowährungen von Krypto-Wallet-Kunden zu gelangen.  ( 4 min )

Pentests helfen, die eigene IT auf Sicherheitsprobleme zu untersuchen. Worauf es dabei ankommt, zeigt Ihnen dieser Online-Workshop. 10 Prozent Rabatt bis 19.4.  ( 3 min )

MacBook Pro M1 2021 und Pro Display XDR erreichen dauerhaft bis zu 1000 Candela – allerdings fehlt dazu eine Konfigurationsoption. Eine neue Software kann es.  ( 4 min )

In jeweils dreitägigen Seminaren für Einsteiger und Fortgeschrittene lernen Teilnehmende die Grundlagen, Besonderheiten und den praktischen Einsatz von Node.js.  ( 4 min )

Das Active Directory ist der Dreh- und Angelpunkt bei Ransomware-Angriffen. Wie man es absichert, zeigt das neue iX kompakt auf über 170 Seiten.  ( 4 min )

Neue Versionen des Webbrowsers Google Chrome schließen eine Sicherheitslücke in der JavaScript-Engine V8. Vermutlich sind Edge und Chromium ebenfalls betroffen.  ( 4 min )

Auf zwei neue Funktionen setzt IBMs z16: Der neue Mainframe soll per KI Transaktionen in Echtzeit überprüfen können und ein quantensicheres Computing bieten.  ( 5 min )

Mit der Version 99 ermöglicht Firefox seinen Nutzern unter anderem, Kreditkarteninformationen im Browser zu hinterlegen und ergänzt einen Vorlese-Shortcut.  ( 4 min )

Neue Versionen des Webbrowsers Google Chrome schließen eine Sicherheitslücke in der JavaScript-Engine V8. Vermutlich sind Edge und Chromium ebenfalls betroffen.  ( 4 min )

For many people, the concept of directed energy, or lasers, conjures images of lightsabers and bank vault security systems—the stuff of Hollywood movies. However, the fact is, lasers are commonly used in everyday life applications, from surgery to optical communications. At Technology Innovation Institute’s (TII) Directed Energy Research Center (DERC), scientists and engineers are using…  ( 12 min )

Between a series of recent high-profile cybersecurity incidents and the heightened geopolitical tensions, there's rarely been a more dangerous cybersecurity environment. It's a danger that affects every organization – automated attack campaigns don't discriminate between targets. The situation is driven in large part due to a relentless rise in vulnerabilities, with tens of thousands of  ( 6 min )

The notorious cybercrime group known as FIN7 has diversified its initial access vectors to incorporate software supply chain compromise and the use of stolen credentials, new research has revealed. "Data theft extortion or ransomware deployment following FIN7-attributed activity at multiple organizations, as well as technical overlaps, suggests that FIN7 actors have been associated with various  ( 3 min )

Germany's Federal Criminal Police Office, the Bundeskriminalamt (BKA), on Tuesday announced the official takedown of Hydra, the world's largest illegal dark web marketplace that has cumulatively facilitated over $5 billion in Bitcoin transactions to date. "Bitcoins amounting to currently the equivalent of approximately €23 million were seized, which are attributed to the marketplace," the BKA  ( 3 min )

With the growth in digital transformation, the API management market is set to grow by more than 30%  by the year 2025 as more businesses build web APIs and consumers grow to rely on them for everything from mobile apps to customized digital services. As part of strategic business planning, an API helps generate revenue by allowing customers access to the functionality of a website or computer  ( 5 min )

A Chinese state-backed advanced persistent threat (APT) group known for singling out Japanese entities has been attributed to a new long-running espionage campaign targeting new geographies, suggesting a "widening" of the threat actor's targeting. The widespread intrusions, which are believed to have commenced at the earliest in mid-2021 and continued as recently as February 2022, have been tied  ( 3 min )

Email marketing service Mailchimp on Monday revealed a data breach that resulted in the compromise of an internal tool to gain unauthorized access to customer accounts and stage phishing attacks.  The development was first reported by Bleeping Computer. The company, which was acquired by financial software firm Intuit in September 2021, told the publication that it became aware of the incident  ( 3 min )

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added the recently disclosed remote code execution (RCE) vulnerability affecting the Spring Framework, to its Known Exploited Vulnerabilities Catalog based on "evidence of active exploitation." The critical severity flaw, assigned the identifier CVE-2022-22965 (CVSS score: 9.8) and dubbed "Spring4Shell", impacts Spring  ( 3 min )

Whether you work in-house or for an external agency, we all share one challenge — dealing with stakeholders, be they your boss, colleagues, or clients. In this post, veteran web designer Paul Boag shares his approach to getting things done in even the most challenging organizations.  ( 8 min )

Russian troops have also lost 676 tanks, 1,858 armored fighting vehicles, 332 artillery pieces, 107 multiple rocket launchers, 55 surface-to-air missiles, 150 jets, 134 helicopters, 7 ships, 76 fuel tanks, 94 drones, and 4 ballistic missile systems, the General Staff said on April 5. The post Ukraine’s General Staff: 18,500 Russian soldiers killed during invasion. appeared first on The Kyiv Independent.  ( 1 min )

Ursula von der Leyen and Josep Borrell will arrive in Kyiv this week, Ivan Jansa said on April 5. He also said that the embassies of the EU mission and Lithuania would return to Kyiv. The post Slovenian prime minister says European Commission president, EU foreign minister will visit Kyiv. appeared first on The Kyiv Independent.  ( 1 min )

At least 266 children have been injured, the prosecutors said on April 5. This figure does not take into account children’s casualties in front-line areas such as Mariupol in Donetsk Oblast, as well as Kyiv, Chernihiv and Luhansk oblasts. The post Prosecutor General’s Office: At least 165 children killed as a result of Russian aggression. appeared first on The Kyiv Independent.  ( 1 min )

Sumy Oblast Governor Dmytro Zhyvytsky reported on April 5 that in Konotop district of Sumy Oblast, the Ukrainian military found the bodies of at least three tortured civilians in places where Russian forces had been stationed. Russians withdrew from Sumy region on April 3. The post Bodies of tortured civilians found in Sumy Oblast. appeared first on The Kyiv Independent.  ( 1 min )

The deal is valued at $1.6 billion to provide Bulgaria with fighter jets and related support equipment. According to Reuters, U.S. officials said the sale agreement was not directly related to Russia’s war on Ukraine. The war has prompted Ukraine’s government to ask that countries with MiG aircraft – including […] The post US State Department approves potential sale of up to eight F-16 aircraft to Bulgaria. appeared first on The Kyiv Independent.  ( 1 min )

The UCC, a group representing over 1.3 million Ukrainian-Canadians, set forth the idea to include the fund in the federal government’s budget. If successful, the fund would provide additional financing for fighter aircraft, weapon systems and munitions along with a financing program similar to the Marshall Plan implemented after World […] The post Ukrainian Canadian Congress proposes a ‘Ukraine Victory Fund.’ appeared first on The Kyiv Independent.  ( 1 min )

The German software giant SAP appears to have been hypocritical about its promises to stop providing cloud services to Russian clients over Russia’s war in Ukraine. According to a document obtained by the Kyiv Independent, just a day before the company’s public announcement to shut down its cloud services in […] The post Germany’s software giant SAP keeps its Russian clients despite claims it shut down cloud services in Russia appeared first on The Kyiv Independent.  ( 3 min )

Artillery rounds hit the building seven times, according to Ukraine’s military, damaging manufacturing equipment. There’s no threat to local residents. The post Russian forces shell chemical plant in Donetsk Oblast. appeared first on The Kyiv Independent.  ( 1 min )

Sirens have been activated in the Cherkasy, Chernivtsi, Dnipropetrovsk, Donetsk, Ivano-Frankivsk, Kharkiv, Khmelnytsky, Kirovohrad, Kyiv, Lviv, Mykolaiv, Odesa, Poltava, Rivne, Sumy, Ternopil, Vinnytsia, Volyn, Zakarpattya, Zaporizhzhia and Zhytomyr oblasts and in the city of Kyiv. The post Air raid alerts go off in almost every region of Ukraine. appeared first on The Kyiv Independent.  ( 1 min )

Editor’s note: Editorials are articles that present the opinion of the editorial team of the Kyiv Independent.  We write this editorial with difficulty. Journalists are the people of words, but right now it’s hard to find the ones to reflect what we feel.  The uncovered atrocities of Russians have left […] The post Editorial: Give Ukraine everything it asks for and now appeared first on The Kyiv Independent.  ( 5 min )

If your internet megaphone lands you in enough trouble, might as well own part of it Social media service Twitter saw its stock surge on Monday because tech thinkfluencer Elon Musk took a 9.2 percent stake in the company.…  ( 9 min )

Investors given 'materially incomplete and misleading' info, it is claimed A Mandiant shareholder has launched a legal challenge to block Google's $5.4 billion takeover of the threat intelligence firm.…  ( 9 min )

If your boss is bugging you about this tech, here's how to respond The state of the metaverse, says Forrester, is that there isn't one. Yet.…  ( 9 min )

Pat Gelsinger won't unlock most of that unless Xeon giant's stock goes sky high  ( 10 min )

Web giant's racks and appliances now generally available Google Distributed Cloud Edge (GDCE) has hit general availability.…  ( 7 min )

Thought Sacha Baron Cohen was a terrible threat actor? Get a load of this: encrypts/steals data, records audio/video and controls keyboard A new remote access trojan (RAT) dubbed "Borat" doesn't come with many laughs but offers bad actors a menu of cyberthreats to choose from.…  ( 8 min )

Semiconductor drought 'affecting all plants and models' says automaker Volvo is again blaming "chip shortages" after the company experienced a 22.1 percent drop in sales for cars in March compared to the previous year.…  ( 7 min )

Talks up 'Client-Edge-Cloud-Network-Intelligence' as it looks to consolidate lockdown gains Lenovo says it is looking to hire 12,000 workers in research and development (R&D) roles.…  ( 8 min )

Community-supported, Red Hat-compatible distro now available to Microsoft fans A Windows Subsystem for Linux-friendly version of AlmaLinux has turned up in the Microsoft Store, adding to an impressive array of options for WSL users.…  ( 7 min )

One year in, CEO Yuki Kusumi wants diversification and growth Panasonic will invest ¥600 billion ($4.89 billion) in electronic vehicle (EV) batteries, hydrogen energy, workplace digitization and supply chain software in a strategy shift for the 104-year old Japanese multinational.…  ( 8 min )

Reportedly has already sent a Q&A to Microsoft cloud rivals, customers The European Commission is starting to gently probe allegations against Microsoft of anti-competitive practices in the cloud computing industry as it pertains to the company’s licensing rules.…  ( 9 min )

Strengthens SDN smarts for hyperscalers, small clouds, and maybe 5G, gives Xilinx some work too AMD has announced it will acquire networking vendor Pensando for $1.9 billion.…  ( 7 min )

We talk to some players in the Apple device management game MacAD  No, it isn't an April Fool's joke we forgot to publish. The Register* actually made it to a recent in-person Apple event: the 2022 Mac Administrator and Developer conference, MacAD. Apple, it seems, may be getting ever more serious about the enterprise.…  ( 9 min )

Customers wake to a nightmare as payment data pilfered from UK website Emma Sleep Company has confirmed to The Reg that it suffered a Magecart attack which enabled ne'er-do-wells to skim customers' credit or debit card data from its website.…  ( 9 min )

Who left that bit of rocket there? It's getting a bit crowded in orbit There was a sigh of relief from ESA controllers over the weekend as the Copernicus Sentinel-1A satellite successfully dodged a decades-old rocket fragment.…  ( 7 min )

The language wars were fun, but they're done Opinion  Here's a recipe for happiness. Don't get overexcited by the latest "C is not a language" kerfuffle.…  ( 9 min )

Beware the terminated techie: Revenge is a dish best preceded by an asterisk Who, Me?  With The Great Resignation upon us, depending on which survey you read, we present a reminder that when a programmer has to go… just let them go. Or face whatever form their vengeance might take. Welcome to Who, Me?…  ( 8 min )

Unusual move sees regulator open consultation on access to audit documents China's Securities Regulatory Commission has opened a consultation on revised regulations aimed at avoiding trouble for local tech companies that list on US stock markets.…  ( 8 min )

Meng Wanzhou will get her regular six-month stints in the role, starting who knows when Huawei executive Meng Wanzhou – who was famously held in Canada and is the daughter of company founder Ren Zhengfei – has quietly been named as one of three people who share the role as chair of the Chinese company's board.…  ( 8 min )

Asset management outfit Macquarie will buy existing bit barns. But first, check out the shiny new 15.2MW bit barn in Indonesia Japanese giant NTT has found a friend to help it fund the planned expansion of its datacenter fleet.…  ( 8 min )

Shame it's not finished – Microsoft has promised more hybrid cloud capabilities are coming real soon now Microsoft has quietly slipped System Center 2022 out the door, more than six months after the debut of Windows Server 2022 – but also flagged the product is not in its final state.…  ( 8 min )

GitHub announced on Monday that it expanded its code hosting platform's secrets scanning capabilities for GitHub Advanced Security customers to automatically block secret leaks. [...]  ( 4 min )

Cloudflare sees signs of Russians increasingly turning to Western news sources to get accurate information about the situation in Ukraine. [...]  ( 4 min )

​​​​​​​VMWare has published a security advisory for the critical remote code execution vulnerability known as Spring4Shell, which impacts multiple of its cloud computing and virtualization products. [...]  ( 4 min )

Email marketing firm MailChimp disclosed on Sunday that they had been hit by hackers who gained access to internal customer support and account management tools to steal audience data and conduct phishing attacks. [...]  ( 4 min )

Threat analysts have compiled a detailed technical report on FIN7 operations from late 2021 to early 2022, showing that the actor is still very active, evolving, and trying new monetization methods. [...]  ( 4 min )

Content delivery networks, or CDNs, allow you to improve the delivery of your website’s static resources, most notably, with CDN caching. They do this by serving your content from edge locations, which are located all over the world. When a … Adding CDN Caching to a Vite Build originally published on CSS-Tricks. You should get the newsletter.  ( 5 min )

Tutoren des Nachhilfe-Startups Gostudent erheben schwere Vorwürfe gegen die Plattform: Es ist von Datenschutzverstößen und verspäteten Lohnzahlungen die Rede.  ( 4 min )

Ein halbes Jahr nach der Einführung des neu aufgelegten MacBook Pro vertreibt der Hersteller erstmals generalüberholte Modelle zu einem niedrigeren Preis.  ( 4 min )

Die Western Australia Police hofft, durch eine iPhone-Integration in Einsatzfahrzeuge die Sicherheit und Effizienz zu erhöhen.  ( 4 min )

Die neue Online-Konferenzreihe von DER SPIEGEL und Heise behandelt Themen wie Führungskompetenz, Zusammenarbeit in Teams sowie hilfreiche Tools und Techniken.  ( 4 min )

In einer globalen Operation haben internationale Strafverfolger 65 Verdächtige verhaftet, die betrügerische Geschäftsmails zur Abzocke von Opfern sendeten.  ( 4 min )

Am 30. Juni 2022 findet der nächste POD statt. Die vierte Auflage des Online-Events dreht sich um Scrum, Product Leadership, Moderationsskills und Streitkultur.  ( 4 min )

Dominique und Oliver Winter erläutern in dieser Folge des Produktwerker-Podcast, warum Magic Estimation für Product Owner extrem hilfreich sein kann.  ( 2 min )

Eine an die Öffentlichkeit gelangte Datenbank zu Bestellungen bei einem russischen Lieferdienst zeigt einmal mehr, wie viel die Daten verraten können.  ( 4 min )

Bei Snapchat lassen sich Youtube-Videos neuerdings als Sticker versenden. Die Funktion ist sowohl unter Android als auch unter iOS verfügbar.  ( 3 min )

Künftig stehen russischen Nutzern keine Unwetterwarnungen mehr zur Verfügung, da die Kooperation mit einem staatlichen Institut eingestellt wurde.  ( 4 min )

Die openSUSE-Entwickler arbeiten derzeit an einem neuen Installationsassistenten. Eine sehr frühe Version des D-Installers lässt sich jetzt ausprobieren.  ( 4 min )

Die populäre Mac-App kommt mit einem überarbeiteten Interface und zahlreichen neuen "Blocks" zur Live-Verarbeitung von Audio.  ( 4 min )

Angriffsvektoren in der eigenen Unternehmens-IT mit Hacker-Mitteln aufdecken und beseitigen lernen. Online-Schulung an 2 Tagen, mit 10 Prozent Rabatt bis 21.4.  ( 3 min )

Java-Software-Entwickler und -architekten erhalten handfeste Programmierpraxis zu den diversen JDK-APIs für Parallelität. 10 % Frühbucherrabatt bis 18.4.  ( 3 min )

In den Niederlanden standen am Sonntag plötzlich die meisten Züge still. Ein wichtiger Teil des Verkehrsleitsystems hat verrücktgespielt.  ( 4 min )

The daring Chinese biophysicist who created the world’s first gene-edited children has been set free after three years in a Chinese prison. He Jiankui created shock waves in 2018 with the stunning claim that he’d altered the genetic makeup of IVF embryos and implanted them into a woman’s uterus, leading to the birth of twin…  ( 4 min )

A bleak new report from the UN’s climate panel underscores the price the world is paying for the long delays in addressing global warming despite decades of warnings. Last year, worldwide energy-related carbon dioxide topped 36 billion tons, setting a new record as the global economy sprang back from the depths of the pandemic. As…  ( 5 min )

An Android spyware application has been spotted masquerading as a "Process Manager" service to stealthily siphon sensitive information stored in the infected devices. Interestingly, the app — that has the package name "com.remote.app" — establishes contact with a remote command-and-control server, 82.146.35[.]240, which has been previously identified as infrastructure belonging to the  ( 3 min )

At least three different advanced persistent threat (APT) groups from across the world have launched spear-phishing campaigns in mid-March 2022 using the ongoing Russo-Ukrainian war as a lure to distribute malware and steal sensitive information. The campaigns, undertaken by El Machete, Lyceum, and SideWinder, have targeted a variety of sectors, including energy, financial, and governmental  ( 3 min )

A group of academics from the University of Oxford and Armasuisse S+T has disclosed details of a new attack technique against the popular Combined Charging System (CCS) that could potentially disrupt the ability to charge electric vehicles at scale. Dubbed "Brokenwire," the method interferes with the control communications that transpire between the vehicle and charger to wirelessly abort the  ( 3 min )

A previously undocumented "sophisticated" information-stealing malware named BlackGuard is being advertised for sale on Russian underground forums for a monthly subscription of $200. "BlackGuard has the capability to steal all types of information related to Crypto wallets, VPN, Messengers, FTP credentials, saved browser credentials, and email clients," Zscaler ThreatLabz researchers Mitesh Wani  ( 3 min )

A variant of the Mirai botnet called Beastmode has been observed adopting newly disclosed vulnerabilities in TOTOLINK routers between February and March 2022 to infect unpatched devices and expand its reach potentially. "The Beastmode (aka B3astmode) Mirai-based DDoS campaign has aggressively updated its arsenal of exploits," Fortinet's FortiGuard Labs Research team said. "Five new exploits were  ( 3 min )

Ever wondered how to build a paginated list that works with and without JavaScript? In this article, Manuel explains how you can leverage the power of Progressive Enhancement and do just that with Eleventy and Alpine.js.  ( 15 min )

A compromised Trezor hardware wallet mailing list was used to send fake data breach notifications to steal cryptocurrency wallets and the assets stored within them. [...]  ( 5 min )

A new remote access trojan (RAT) named Borat has appeared on darknet markets, offering easy-to-use features to conduct DDoS attacks, UAC bypass, and ransomware deployment. [...]  ( 4 min )

Für Version 2.0 der TI zur Digitalisierung des Gesundheitswesens fordern Experten eine höhere Nutzerfreundlichkeit, ein Migrationskonzept und eine Testumgebung.  ( 5 min )

Bundesinnenministerin Nancy Faeser (SPD) rüstet angesichts des Ukraine-Kriegs für digitale Gegenschläge. Die Ampel-Koalition ist an sich gegen Hackbacks.  ( 5 min )

Plus: Improving Google Search and open-source software library for more natural computer speech In brief  AI algorithms crushed eight world champions playing the card game Bridge, marking another milestone in machine learning systems becoming better than humans at specific games.…  ( 8 min )

Viasat und SentinelOne haben Details zum Cyberangriff auf KA-Sat veröffentlicht, der hierzulande Windräder lahmlegte. Sie sehen eine Botnetz-Verbindung.  ( 5 min )

Das Team der Linux-Distribution Elementary OS trennt sich. Gründerin Danielle Foré bleibt als Einzige an Bord und plant, den Fokus des Projektes zu ändern.  ( 4 min )

Cyberangreifer russischer Geheimdienste sollen die IT des ungarischen Außenministeriums unterwandert haben. Auch Nato- und EU-Dokumente seien abgeflossen.  ( 5 min )

Heute in c't uplink sprechen wir über Datenschutz bei Android: Einstellungen optimieren, Bloatware entfernen, Custom-ROMs installieren.  ( 4 min )

Plus: Hive hits health-care org, law enforcement ransomware response is lacking, and orgs can't meet new disclosure rules In Brief  Cybercriminals have used fake emergency data requests (EDRs) to steal sensitive customer data from service providers and social media firms. At least one report suggests Apple, and Facebook's parent company Meta, were victims of this fraud.…  ( 11 min )

When does this thing get to unionize? Robotics company Boston Dynamics is making one of its latest robots more generally commercially available: a mobile, autonomous arm called Stretch.…  ( 7 min )

If it can cut energy requirements for both, this idea might not stink after all Tomorrow Water, a subsidiary of Korean firm BKT, is aiming to make datacenters more environmentally friendly by colocating them with sewage treatment plants, an arrangement it claims can save both energy and water.…  ( 7 min )

It's a bug's life Video  After some careful study, it turns out the brain of an insect is pretty good at separating signal from noise.…  ( 8 min )

If decision is upheld, this 'could seriously harm FOSS and copyleft' A US federal district court decision in California favoring database biz Neoj4 is incorrect and imperils free open-source software, according to the Software Freedom Conservancy.…  ( 10 min )

White House chimes in: Folks 'in every state must have a free and fair choice' to unionize Amazon warehouse workers in New York City voted in favor of joining a trade union on Friday, marking the first-ever successful union campaign against the tech giant in its history.…  ( 8 min )

Two teenagers from the UK charged with helping the Lapsus$ extortion gang have been released on bail after appearing in the Highbury Corner Magistrates Court court on Friday morning. [...]  ( 3 min )

Yesterday, American Express users across the world including US, UK, and Europe, experienced widespread outages lasting hours, and some users continue to. BleepingComputer was able to briefly reproduce issues right before Amex confirmed partially restoring services. [...]  ( 4 min )

Yesterday, American Express users across the world including US, UK, and Europe, experienced widespread outages lasting hours, and some users continue to. BleepingComputer was able to briefly reproduce issues right before Amex confirmed partially restoring services. [...]  ( 4 min )

While ransomware is still conducting attacks and all companies must stay alert, ransomware news has been relatively slow this week. However, there were still some interesting stories that we outline below. [...]  ( 4 min )

A 15-year-old security vulnerability has been disclosed in the PEAR PHP repository that could permit an attacker to carry out a supply chain attack, including obtaining unauthorized access to publish rogue packages and execute arbitrary code. "An attacker exploiting the first one could take over any developer account and publish malicious releases, while the second bug would allow the attacker  ( 3 min )

The City of London Police on Friday disclosed that it has charged two of the seven teenagers, a 16-year-old and a 17-year-old, who were arrested last week for their alleged connections to the LAPSUS$ data extortion gang. "Both teenagers have been charged with: three counts of unauthorized access to a computer with intent to impair the reliability of data; one count of fraud by false  ( 3 min )

DevOps platform GitLab has released software updates to address a critical security vulnerability that, if potentially exploited, could permit an adversary to seize control of accounts. Tracked as CVE-2022-1162, the issue has a CVSS score of 9.1 and is said to have been discovered internally by the GitLab team. "A hardcoded password was set for accounts registered using an  ( 3 min )

Microsoft now allows enterprise admins to re-enable the MSIX ms-appinstaller protocol handler disabled after Emotet abused it to deliver malicious Windows App Installer packages. [...]  ( 4 min )

A previously unknown Android malware uses the same shared-hosting infrastructure previously seen used by the Russian APT group known as Turla, though attribution to the hacking group not possible. [...]  ( 4 min )

A previously unknown Android malware has been linked to the Turla hacking group after discovering the app used infrastructure previously attributed to the threat actors. [...]  ( 4 min )

A Mirai-based distributed denial-of-service (DDoS) botnet tracked as Beastmode (aka B3astmode) has updated its list of exploits to include several new ones, three of them targeting various models of Totolink routers. [...]  ( 4 min )

Japanese cybersecurity software firm Trend Micro has patched a high severity security flaw in the Apex Central product management console that can let attackers execute arbitrary code remotely. [...]  ( 3 min )

GitLab has addressed a critical severity vulnerability that could allow remote attackers to take over user accounts using hardcoded passwords. [...]  ( 3 min )

The European Parliament has taken the first steps for new legislation against money-laundering that covers cryptocurrency transactions, which are an important part of illicit activities today. [...]  ( 5 min )

Microsoft has added a new safeguard hold blocking Windows 11 upgrades for Windows 10 customers who don't import their Internet Explorer 11 (IE11) data into Microsoft Edge before trying to install the newest Windows version. [...]  ( 3 min )

Okta's outsourced provider of support services, Sitel (Sykes) has shared more information this week in response to the leaked documents that detailed the various incident response tasks carried out by Sitel after the Lapsus$ hack. [...]  ( 4 min )

Phishing attacks are abusing Microsoft Azure's Static Web Apps service to steal Microsoft, Office 365, Outlook, and OneDrive credentials. [...]  ( 3 min )

Fixed passphrases for OmniAuth users not such a great idea GitLab on Thursday issued security updates for three versions of GitLab Community Edition (CE) and Enterprise Edition (EE) software that address, among other flaws, a critical hard-coded password bug.…  ( 8 min )

Ferroelectric devices key for this qubit-slinging startup A Swiss quantum computing company claiming a world-first discovery has just marked what it believes is one of the largest funding rounds in the history of the quantum tech space.…  ( 8 min )

Open-source HPC suite now includes 100 full-release products The Extreme-scale Scientific Software Stack (E4S) project has released version 22.02 of its collection of software packages for developing, deploying and running scientific applications on high-performance compute (HPC) platforms.…  ( 8 min )

Pretty 'community' version of one of the best-known Linuxes in Middle Kingdom Deepin version 20.5 is the latest "Community" version of one of the best-known Chinese Linux distros, and shows an interesting blend of technological influences.…  ( 10 min )

In the meantime, Windows giant eliminates 'challenged restriction' Microsoft's attempts to have a 2021 lawsuit's claims regarding anti-competitive practices struck out were this week contested in UK courts.…  ( 8 min )

Two teenagers arrested as part of police probe into extortion group British police have charged two teenagers as part of an international investigation into the Lapsus$ cyber extortion gang.…  ( 8 min )

So long as the economy stays healthy, and supply can catch up to demand IDC forecasts that spending on compute and storage systems for cloud infrastructure will grow 21.7 percent this year compared to 2021. Spending on public clouds is also expected to pass that of non-cloud infrastructure in 2022.…  ( 9 min )

Tech’s posterchild of German industrial success must face its failures as it succumbs to midlife angst Feature  Like so many stories in the history of computing, it involves Xerox. Scientific Data Systems was sold by Xerox to IBM as part of a hardware deal. When Big Blue canned a related software project, a group of five German engineers saw an opportunity.…  ( 12 min )

Steering body calls for help to 'identify ISA gaps, build plans for future extensions' The momentum behind RISC-V is growing with the backing of tech heavyweights, but it comes with a challenge: encouraging CPU designers to stay on the same page, and to avoid the sort of fragmentation that happened in MIPS and Android.…  ( 10 min )

We can't have that contractor making us look bad Something for the Weekend  I nearly choked when I read the email. "Your eBay auction has ended. Your NFT has sold for $1 million." That's about $0.999999 million more than I thought it was worth, hence the surprise. Oh, and becoming comfortably well off was a bit of a jolt, I suppose.…  ( 12 min )

Also: Belarusian miscreants pivot to browser-in-the-browser attacks A Russian cybercrime gang has lately sent credential-phishing emails to the military of Eastern European countries and a NATO Center of Excellence, according to a Google threat report this week. …  ( 9 min )

Forrester Research is DeFi-ing current hype Analyst firm Forrester Research has had a look at Web3 – the buzzword describing blockchain-powered decentralized metaverse-y stuff – and decided there's not a lot to like.…  ( 9 min )

Company changed address to avoid probe after sending 378,553 messages Britain's data watchdog has issued an £80,000 penalty to a financial advisor that dispatched hundreds of thousands of unsolicited text messages during lockdown.…  ( 8 min )

Behold the rarest of IT skills: Tact and diplomacy On Call  Being On Call requires certain skills. Technical ability? Sure. A desire to help? Naturally. However, there are some calls where one has to dip into one's reservoirs of diplomacy. Two bytes: good. Loss of face: bad.…  ( 8 min )

And software nasty may have a VPNFilter link, too Tens of thousands of Viasat satellite broadband modems that were disabled in a cyber-attack some weeks ago were wiped by malware with possible links to Russia's destructive VPNFilter, according to SentinelOne.…  ( 11 min )

The deal is a long way from done and players can already foresee rival bids Singapore-based Effissimo Capital Management, the largest shareholder in troubled Japanese tech giant Toshiba, has signed a deal to sell its stake to American private investment firm Bain Capital – if Bain decides to launch a takeover bid.…  ( 8 min )

Managed to send material from his private email address The United States Department of Justice (DoJ) has revealed it has indicted a National Security Agency (NSA) employee for sharing top secret national security information with an unnamed person who worked in the private sector.…  ( 8 min )

Fittings open on Saturday, to make it easier to take motorized pals with you wherever you go Japanese startup Groove X will on Saturday stage fittings for a wearable sling - somewhat akin to baby carriers - designed to let owners of "Love Robots" more easily carry the machines wherever they go.…  ( 8 min )

Public agencies told to stop using overseas apps from 2025 as parallel imports approved, too Russian President Vladimir Putin has banned the purchase of foreign software – be it standalone applications or code shipping in equipment – for significant critical infrastructure projects, with limited exceptions.…  ( 8 min )

Vid-streamer iQIYI also earns a place Chinese search giant and AI cloud company Baidu has landed on the US Securities and Exchange Commission's provisional list of companies it might de-list because of opaque disclosures.…  ( 8 min )

Alphabet AI lab under fire after bosses 'dragged out' probe into abuse A former DeepMind employee has blasted the AI lab for being, in her view, "grossly inadequate" in dealing with internal sexual harassment.…  ( 8 min )

Die Eufy Video Doorbell Dual 2K überwacht den Eingangsbereich gleich mit zwei Kameras. Die App-Steuerung ist tadellos und die Videos werden lokal gespeichert.  ( 7 min )

Gegenwärtig ist das erforderliche hohe Maß an Vertrauen in den russischen Hersteller nicht gewährleistet, hat das Verwaltungsgericht Köln entschieden.  ( 4 min )

Bis einschließlich 9. Mai können sich Developer mit Vorträgen und Workshops für die nächste Ausgabe der Nürnberger Entwicklerkonferenz bewerben.  ( 3 min )

Unsere Übersicht kleiner, aber interessanter Meldungen enthält diese Woche unter anderem Slint, Lucene, GitHub Copilot, Quarkus und CMake.  ( 3 min )

Mehr als 35.500 Schülerinnen und Schülern starten Runde eins des Jugendwettbewerbs Informatik – so viele Kinder wie noch nie.  ( 3 min )

Apple steigt umfassender in den Geschäftskundenmarkt ein, vorerst nur in den USA. Der neue Dienst umfasst Geräteverwaltung, Cloud-Speicher und mehr Support.  ( 4 min )

Über den OLED-Gaming-Monitor AW3423DW wird hitzig diskutiert. c't 3003 klärt im Test, warum.  ( 8 min )

Die neue Version von YugaByteDB soll Entwicklern durch etliche neue Features, darunter die Integration in einige Werkzeuge, die Arbeit spürbar erleichtern.  ( 6 min )

Kann Grafana Doom? Drei Entwickler des Labs stellten sich beim Hackathon im März der Challenge und liefern zum Geburtstag des Spiels die Version "Doomfana".  ( 5 min )

Das Community-Festival präsentiert ein ebenso buntes wie informatives Programm rund um Container, Microservices, DevOps und CI/CD. Jetzt Tickets sichern.  ( 5 min )

Im Rahmen des Wettbewerbs "Grand Challenge der Quantenkommunikation" erhalten Projekte rund um die sichere quantenbasierte Authentifizierung Fördermittel.  ( 4 min )

Für Qt 5.15 verlängert die Qt Company den Support um zwei Jahre, allerdings nur für Abokunden oder über einen gesondert gebuchten Extended Support.  ( 4 min )

Dieses Jahr erscheinen die ersten GPUs mit HBM3-DRAM – SK Hynix gibt aber auch schon einen Ausblick auf die Nachfolgergeneration bis zum Jahr 2028+.  ( 4 min )

Die Gitlab-Entwickler haben ein Update veröffentlicht, um Sicherheitslücken zu schließen. Eine kritische Lücke könnte Angreifern die Kontoübernahme ermöglichen.  ( 4 min )

Neue Verschlüsselungsverfahren widerstehen auch Quantencomputern. Im Workshop lernen Softwareentwickler die nötige Theorie und bekommen Tipps für die Praxis.  ( 3 min )

In Rockwell Automation Logix-Kontrollern können Angreifer Sicherheitslücken ausnutzen, um eigenen Code auszuführen. Die CISA gibt Admins Handlungsempfehlungen.  ( 4 min )

Wie wird man eigentlich der eigene Chef? Drei ganz konkrete Tipps für Leute, die ihre Arbeitsweise und Projekte gerne selbstständig in die Hand nehmen wollen.  ( 4 min )

Am 1. April 1972 gründeten einige Ex-IBMler in der kurpfälzischen Provinz das derzeit einzige deutsche Softwarehaus von Weltrang: SAP.  ( 10 min )

Das Bundesgesundheitsministerium hat gegenüber der Kassenärztlichen Bundesvereinigung bestätigt: Praxen tragen keine Schuld für Konnektoren.  ( 4 min )

Angreifer könnten im Smarthome aufgrund einer Sicherheitslücke in RaspberryMatic die Kontrolle übernehmen. Ein Update zum Absichern steht zur Verfügung.  ( 3 min )

Unter Verwendung von Systemroutinen war es möglich, Apples zentralen Account abzufischen. Der Konzern reagierte nur mit Verzögerung.  ( 4 min )

Die Betriebssystem-Updates sollen Bugs beseitigen, die iPhone- und Mac-Nutzer geplagt haben. Sicherheitslücken werden offenbar aktiv für Angriffe ausgenutzt.  ( 4 min )

The cyberattack aimed at Viasat that temporarily knocked KA-SAT modems offline on February 24, 2022, the same day Russian military forces invaded Ukraine, is believed to have been the consequence of wiper malware, according to the latest research from SentinelOne. The findings come as the U.S. telecom company disclosed that it was the target of a multifaceted and deliberate" cyberattack against  ( 3 min )

Two new security vulnerabilities have been disclosed in Rockwell Automation's programmable logic controllers (PLCs) and engineering workstation software that could be exploited by an attacker to inject malicious code on affected systems and stealthily modify automation processes. The flaws have the potential to disrupt industrial operations and cause physical damage to factories in a manner  ( 3 min )

Threat actor groups like Wizard Spider and Sandworm have been wreaking havoc over the past few years – developing and deploying cybercrime tools like Conti, Trickbot, and Ryuk ransomware. Most recently, Sandworm (suspected to be a Russian cyber-military unit) unleashed cyberattacks against Ukranian infrastructure targets. To ensure cybersecurity providers are battle ready, MITRE Engenuity uses  ( 4 min )

A Chinese advanced persistent threat tracked as Deep Panda has been observed exploiting the Log4Shell vulnerability in VMware Horizon servers to deploy a backdoor and a novel rootkit on infected machines with the goal of stealing sensitive data. "The nature of targeting was opportunistic insofar that multiple infections in several countries and various sectors occurred on the same dates," said  ( 4 min )

The North Korean state-backed hacking crew, otherwise known as the Lazarus Group, has been attributed to yet another financially motivated campaign that leverages a trojanized decentralized finance (DeFi) wallet app to distribute a fully-featured backdoor onto compromised Windows systems. The app, which is equipped with functionalities to save and manage a cryptocurrency wallet, is also designed  ( 3 min )

Networking equipment maker Zyxel has pushed security updates for a critical vulnerability affecting some of its business firewall and VPN products that could enable an attacker to take control of the devices. "An authentication bypass vulnerability caused by the lack of a proper access control mechanism has been found in the CGI program of some firewall versions," the company said in an advisory  ( 3 min )

Apple on Thursday rolled out emergency patches to address two zero-day flaws in its mobile and desktop operating systems that it said may have been exploited in the wild. The shortcomings have been fixed as part of updates to iOS and iPadOS 15.4.1, macOS Monterey 12.3.1, tvOS 15.4.1, and watchOS 8.5.1. Both the vulnerabilities have been reported to Apple anonymously. Tracked as CVE-2022-22675,  ( 3 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Droughts are cutting into California’s hydropower. Here’s what that means for clean energy. The droughts that swept across the western US in 2021 sparked wildfires and damaged crops. But the historic lack of…  ( 4 min )

The droughts that swept across the western US in 2021 sparked wildfires and damaged crops. But the historic lack of water also had an impact on one of California’s key sources of renewable energy: hydropower. Electricity generation from California hydropower plants was down 48% from the 10-year average, according to new data from the Energy…  ( 3 min )

Die Gitlab-Entwickler haben ein Update veröffentlicht, um Sicherheitslücken zu schließen. Eine kritische Lücke könnte Angreifern die Kontoübernahme ermöglichen.  ( 4 min )

In Rockwell Automation Logix-Kontrollern können Angreifer Sicherheitslücken ausnutzen, um eigenen Code auszuführen. Die CISA gibt Admins Handlungsempfehlungen.  ( 4 min )

Angreifer könnten im Smarthome aufgrund einer Sicherheitslücke in RaspberryMatic die Kontrolle übernehmen. Ein Update zum Absichern steht zur Verfügung.  ( 3 min )

Die Betriebssystem-Updates sollen Bugs beseitigen, die iPhone- und Mac-Nutzer geplagt haben. Sicherheitslücken werden offenbar aktiv für Angriffe ausgenutzt.  ( 4 min )

Next.js’ recent 12.0 release included a new beta feature: middleware. For a detailed explanation, you can read all about it in Sam’s previous article, “[Next.js Wildcard Subdomains](https://www.smashingmagazine.com/2021/11/nextjs-wildcard-subdomains/)”. This article, on the other hand, dives into the overall concept of middleware and how handy it can be in building things.  ( 6 min )

Nothing like a little kernel-level memory snooping, code execution Apple has released updates for its mobile and desktop operating systems to patch security holes that may well have been exploited in the wild.…  ( 7 min )

Uni trio probe efforts by miners to max out rewards at expense of others UC Berkeley boffins have found that strategies for squeezing extra profit out of Ethereum transactions come at the cost of other cryptocurrency investors and threaten the security and stability of the entire Ethereum ecosystem.…  ( 10 min )

Troubled container company may escape confines of its doldrums Docker hasn't just got back in the fight thanks to its latest round of funding: it's earned double-unicorn status, too. …  ( 7 min )

Lead dev of modest ground-up Unix-like OS quits job to work on it SerenityOS, which started out as a one-man project in 2018, has now got to the point where its creator proudly announced that its web browser passes the Acid3 browser test.…  ( 8 min )

Backers include SK Lubricants as dielectric fluid research partner An enterprise immersion cooling company has received a $28 million investment it plans to use to sink itself into additional customer datacenters.…  ( 8 min )

Will provide tips on spotting bad info, frontload highly cited sources Further embracing its unspoken role as arbiter of truth, Google has unrolled some new search result features to help users "sort out what information is credible and what isn't."…  ( 8 min )

You didn't have any plans for the weekend anyway, did you? Another Java Remote Code Execution vulnerability has reared its head, this time in the popular Spring Framework and, goodness, it's a nasty one.…  ( 9 min )

Chip giant wants to compete in software while playing catch-up in silicon Intel hopes to gain an extra edge in the cloud and datacenter markets with the acquisition of Granulate, a developer of software that optimizes complex and old workloads for modern CPUs.…  ( 9 min )

RPA vendor's recurring revenue for 2023 will be down by $15m after pausing Russia operations UiPath's CEO has said the war in Ukraine is "having a profound impact" on business confidence in Europe and the UK.…  ( 8 min )

Reverse engineering yields sticky microarchitectural vulnerabilities Nvidia's ultra-dense GPU-driven AI training and inference systems are prone to covert and side channel attacks, according to research just published from a team led by Pacific Northwest National Laboratory (PNNL). This might be less concerning for those with on-prem DGX systems, but for cloud vendors selling time on the AI training boxes, the vulnerabilities are worth noting.…  ( 9 min )

Confused? Don’t be – Intel flagged this when it married Evo and vPro a while back Dell has refreshed its business laptops, predictably enough adding 12th-gen Intel silicon while also trying to make its offerings in a very well established product category stand out.…  ( 8 min )

Uses 64-node cluster of classical HPC boxen to prove it Fujitsu says it has developed the world's fastest quantum simulator capable of handling 36 qubit quantum circuits. The firm will use this to speed development of quantum applications, and said it is already planning a further simulator capable of handling more qubits.…  ( 8 min )

Windows 10 still rules the roost among Microsoft fans, according to AdDuplex The growth of Microsoft's flagship operating system, Windows 11, appears to be slowing if figures from AdDuplex are to be believed.…  ( 8 min )

GNOME 42 and some other small changes for both... though we still miss Unity Late April should see the release of the 36th versions of two of the biggest Linux distros: Fedora 36 and Ubuntu 22.04.…  ( 10 min )

'We have this small moment in time where we can make improvements in our defensive posture' The US and its NATO allies should expect a "long tail of retaliation," in the form of cyberattacks, for the sanctions imposed on Russia, says cloud security shop ExtraHop's CEO Patrick Dennis.…  ( 10 min )

Questions linger over Technology Sourcing Programme after 2nd supplier in a week awarded significant extensions for historic contract UK tax authority HMRC has awarded Fujitsu a £250m contract for managed desktop services (MDS), extending a deal that dates back to 2017.…  ( 8 min )

Hosting platforms required to report content creators' names and income to stymie tax dodges China's massive live-streaming industry is the next target of Beijing's tech regulation blitz, with three government agencies announcing a requirement for operators to register in an attempt to eliminate tax evasion.…  ( 8 min )

Architecture may make it possible to train one machine-learning model that performs all sorts of tasks Google says it is developing an AI architecture that can be used to train one giant system capable of performing multiple different tasks more efficiently than today's models.…  ( 9 min )

Your cloudy server will not self-destruct – even if the hardware it runs on does Amazon Web Services has added a small but important resilience feature: instances in its Elastic Computing Cloud (EC2) now include automatic recovery by default.…  ( 8 min )

Oh look, someone else who thinks on-prem is old hat Cryptocurrency mining groups that typically have targeted on-premises servers are now competing fiercely for servers in the cloud.…  ( 10 min )

Foundry giant's staff could be sleeping at work during new COVID lockdown Chipmaking giant TSMC says China's COVID lockdowns slowed PC and smartphone demand, but given the Taiwanese outfit already struggles to meet demand, company chair Mark Liu was unfussed by the dip.…  ( 8 min )

Speech also alleges Russian troops in Ukraine have mutinied, shot down own plane The director of UK intelligence agency Government Communications Headquarters (GCHQ), Sir Jeremy Fleming, has warned that China is trying to introduce "undemocratic values as the default for vast swathes of future tech and the standards that govern it."…  ( 10 min )

Think tank fears future studies of this sort may be harder as social networks withdraw data Russia, Iran and Saudi Arabia are the top three proliferators of state-linked Twitter misinformation campaigns, according to a report released Wednesday by the Australian Strategic Policy Institute (ASPI).…  ( 9 min )

Better late than never – all its global and Chinese hyperscale rivals are already there Alibaba Cloud has opened its first datacenter in South Korea.…  ( 8 min )

Ill-gotten gains bankrolled swish life of flash cars and real estate A now-former finance director stole tablet computers and other equipment worth $40 million from the Yale University School of Medicine, and resold them for a profit.…  ( 8 min )

Slap-a-teacher and smash-the-school crazes were carefully engineered smears, it is claimed Facebook parent Meta, which has been struggling to compete against TikTok, has reportedly been paying a Republican-oriented consulting firm to encourage negative media reports about the Chinese-owned rival.…  ( 10 min )

Better late than never The widely used Zlib data-compression library finally has a patch to close a vulnerability that could be exploited to crash applications and services — four years after the vulnerability was first discovered but effectively left unfixed.…  ( 9 min )

The Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal civilian agencies on Thursday to patch a critical Sophos firewall bug and seven other vulnerabilities within the next three weeks, all exploited in ongoing attacks. [...]  ( 3 min )

A new information-stealing malware named BlackGuard is winning the attention of the cybercrime community, now sold on numerous darknet markets and forums for a lifetime price of $700 or a subscription of $200 per month. [...]  ( 5 min )

Network equipment company Zyxel has updated the firmware of several of its business-grade firewall and VPN products to address a critical-severity vulnerability that could give attackers administrator-level access to affected devices. [...]  ( 3 min )

Apple has released security updates on Thursday to address two zero-day vulnerabilities exploited by attackers to hack iPhones, iPads, and Macs. [...]  ( 3 min )

A newly discovered data wiper malware that wipes routers and modems has been deployed in the cyberattack that targeted the KA-SAT satellite broadband service to wipe SATCOM modems on February 24, affecting thousands in Ukraine and tens of thousands more across Europe. [...]  ( 5 min )

A newly discovered data wiper malware that wipes routers and modems has been loosely linked to the cyberattack that targeted the KA-SAT satellite broadband service on February 24, affecting thousands in Ukraine and tens of thousands across Europe. [...]  ( 4 min )

The Chinese APT group known as Deep Panda has been spotted in a recent campaign targeting VMware Horizon servers with the Log4Shell exploit to deploy a novel rootkit named 'Fire Chili'. [...]  ( 4 min )

Spring released emergency updates to fix the 'Spring4Shell' zero-day remote code execution vulnerability, which leaked prematurely online before a patch was released. [...]  ( 3 min )

Curiosity and a love of learning are definite advantages in the cybersecurity field, and reading and learning more about the subject is just a few clicks away. The world needs more people out there fighting cybercrime. Perhaps one of them could be you. [...]  ( 5 min )

Atento has published its 2021 financial performance results, which have a massive $42.1 million dent from a ransomware attack the firm suffered in October 2021. [...]  ( 3 min )

EXCLUSIVE: A bug in the support dashboard of Palo Alto Networks (PAN) exposed thousands of customer support tickets to an unauthorized individual, BleepingComputer has learned. The exposed information included, customer names, contact information, conversations between staff and customers, firewall logs and configuration dumps. [...]  ( 4 min )

Hackers associated with the North Korean government have been distributing a trojanized version of the DeFi Wallet for storing cryptocurrency assets to gain access to the systems of cryptocurrency users and investors. [...]  ( 4 min )

Phishing actors are actively abusing Calendly to kick off a clever sequence to trick targets into entering their email account credentials on the phishing page. [...]  ( 4 min )

Reseller wie Timmunity und Alternate haben Sicherheitssoftware des russischen Produzenten aus dem Programm genommen oder gekündigt. Andere halten zu Kaspersky.  ( 5 min )

Besprechungen direkt in Docs, Bild-im-Bild-Modus für Meet, übersichtlichere Diskussionen in Spaces – Google erweitert sein Cloud-Office Workspace deutlich.  ( 4 min )

Durch Zugriff auf Mail-Adressen von Strafverfolgern konnten Hacker offenbar Nutzerdaten bei Diensten abfragen. In Notfällen werden Daten schnell herausgegeben.  ( 4 min )

Nur 1,5 Jahre hat das chinesische Start-up Moore Threads benötigt, um eigene Grafikkarten herzustellen. Zu den Geldgebern gehören chinesische Tech-Riesen.  ( 4 min )

Die GParted-Entwickler haben ihr minimalistisches Linux-System GParted Live mit ihrer Partitionsverwaltungssoftware auf den neuen Stand 1.4.0 gebracht.  ( 3 min )

Auf Druck von Regulierern erlaubt Apple sogenannten "Reader"-Apps das Setzen eines einzelnen externen Links zur Account-Verwaltung. Die Auflagen sind strikt.  ( 4 min )

Das Spring-Entwicklerteam stellt Patches für zwei Sicherheitslücken zur Verfügung. Daneben droht jedoch mit Spring4Shell eine weitere Gefahr.  ( 5 min )

Die neuen Werbetechniken sollen zuerst von Beta-Testern erprobt werden. Den Geltungsbereich der Datenschutzgrundverordnung scheut Google jedoch noch.  ( 4 min )

heise Developer präsentiert software-architektur.tv, Eberhard Wolffs Videocast. Weiter geht es mit dem Bau einer Architektur. Im Fokus: Benutzerfreundlichkeit.  ( 3 min )

Der renommierte Journalist und IT-Sicherheitsexperte Brian Krebs wurde vom Hersteller Ubiquiti für seine angeblich falsche Berichterstattung verklagt.  ( 5 min )

Die zweitägige Schulung bereitet Sie auf Prüfungen im Rahmen der Umsetzung des § 8a (3) des BSI-Gesetzes vor. 10 Prozent Frühbucherrabatt bis 18.4.  ( 3 min )

Arbeitgeber sind zukünftig zur Arbeitszeiterfassung verpflichtet. Software-Lösungen hierfür existieren viele – rechtliche Besonderheiten auch.  ( 14 min )

Die Plattform der ehemaligen Betreiber von Gurock Software erweitert zum Start der öffentlichen Testphase die Anbindung an Issue-Tracking-Systeme.  ( 4 min )

In zwei Tagen gut vorbereitet auf die Prüfung und Zertifizierung Ihrer IT-Produkte nach deutschen und europäischen Standards wie CC, BSZ und NESAS.  ( 3 min )

Dagger setzt auf ein Modulsystem für den Continuous-Integration-Prozess. Das Projekt erhält als Starthilfe eine Finanzspritze von 20 Millionen US-Dollar.  ( 4 min )

Sarah Hoffmann, Klassenlehrerin an einer Münchner Mittelschule, über ihre Erfahrungen mit den Experience Packages des Skills for Innovation-Programms von Intel.  ( 7 min )

Der mit einer Million US-Dollar dotierte "Nobelpreis für Informatik" geht an Jack Dongarra, der seit 50 Jahren an Algorithmen für Supercomputer forscht.  ( 3 min )

Basierend auf Unikernels lassen sich mit MirageOS schlanke und potente Abbilder für virtuelle Instanzen schaffen. Version 4 bietet einige Neuerungen.  ( 5 min )

Der mit dem A13-SoC ausgestattete Bildschirm verfügt über ein ausgefeiltes Innenleben, wie eine Zerlegung durch IFixIt zeigt.  ( 4 min )

Das Online-Event am 7. April liefert einschlägiges GitOps-Know-how – vom Bereitstellen der Infrastructure-as-Code bis zum automatisierten Software-Deployment.  ( 4 min )

Die Linux-Distribution Rolling Rhino Remix liefert ein Ubuntu-System, das sich immer auf dem neuesten Stand hält – aber nicht für jeden geeignet ist.  ( 4 min )

An fünf Terminen im April und Mai können sich Admins in 20 praxisnahen Stunden zu den wichtigsten Themen rund um Microsoft 365 weiterbilden.  ( 4 min )

Seit die EU ihren Gesetzesarm bis zu den DNS-Root-Servern in den USA ausstreckte, befürchten die Betreiber staatliche Einmischung, die das Internet beschneiden.  ( 7 min )

In Berlin bekräftigten Vertreter von Bund, Ländern und Wirtschaft, künftig Verwaltungstechnik gemeinsam zu gestalten. Neue Chancen für die Tech-Szene?  ( 5 min )

The maintainers of Spring Framework have released an emergency patch to address a newly disclosed remote code execution flaw that, if successfully exploited, could allow an unauthenticated attacker to take control of a targeted system. Tracked as CVE-2022-22965, the high-severity flaw impacts Spring Framework versions 5.3.0 to 5.3.17, 5.2.0 to 5.2.19, and other older, unsupported versions. Users  ( 3 min )

Three security vulnerabilities have been disclosed in the popular Wyze Cam devices that grant malicious actors to execute arbitrary code and access camera feeds as well as unauthorizedly read the SD cards, the latter of which remained unresolved for nearly three years after the initial discovery. The security flaws relate to an authentication bypass (CVE-2019-9564), a remote code execution bug  ( 3 min )

Researchers have disclosed what they say is the first-ever Python-based ransomware strain specifically designed to target exposed Jupyter notebooks, a web-based interactive computing platform that allows editing and running programs via a browser. "The attackers gained initial access via misconfigured environments, then ran a ransomware script that encrypts every file on a given path on the  ( 3 min )

A Belarusian threat actor known as Ghostwriter (aka UNC1151) has been spotted leveraging the recently disclosed browser-in-the-browser (BitB) technique as part of their credential phishing campaigns exploiting the ongoing Russo-Ukrainian conflict. The method, which masquerades as a legitimate domain by simulating a browser window within the browser, makes it possible to mount convincing social  ( 4 min )

A zero-day remote code execution (RCE) vulnerability has come to light in the Spring framework shortly after a Chinese security researcher briefly leaked a proof-of-concept (PoC) exploit on GitHub before deleting their account. According to cybersecurity firm Praetorian, the unpatched flaw impacts Spring Core on Java Development Kit (JDK) versions 9 and later and is a bypass for another  ( 3 min )

Taiwanese company QNAP this week revealed that a selected number of its network-attached storage (NAS) appliances are affected by a recently-disclosed bug in the open-source OpenSSL cryptographic library. "An infinite loop vulnerability in OpenSSL has been reported to affect certain QNAP NAS," the company said in an advisory published on March 29, 2022. "If exploited, the vulnerability allows  ( 3 min )

Das Spring-Entwicklerteam stellt Patches für zwei Sicherheitslücken zur Verfügung. Daneben droht jedoch mit Spring4Shell eine weitere Gefahr.  ( 5 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. This startup wants to kick-start a molecular electronics revival In 2000, many hoped molecular electronics (using single molecules to create circuits and components) would leapfrog silicon-based circuitry to allow computer chips to keep…  ( 4 min )

In 1999, Rice University chemist Jim Tour co-founded Molecular Electronics Corporation, a company that aimed to use single molecules to make a new type of electronic memory. But Tour had even bigger dreams. In a 2000 story in Wired, he foretold a future in which molecular electronics would leapfrog silicon-based circuitry, allowing computer chips to…  ( 5 min )

Let’s welcome the new month with some new wallpapers. Designed with love by artists and designers from across the globe, they are available in versions with and without a calendar for April 2022.  ( 7 min )

In memo seen by The Register, chip giant seems to be striving for championship yoga-levels of flexibility Intel is going to tell more of its staff to return to their campus desks after many have been working from home or working in the office occasionally, judging by an internal memo sent to employees on Tuesday.…  ( 8 min )

Now for lawmakers to wrangle over the fine print The US Senate this week passed the America COMPETES Act by a bipartisan 68-28 vote, moving more than $50 billion in semiconductor industry funding closer to President Biden's desk. …  ( 8 min )

Network equipment maker insists it acted responsibly following intrusion Network equipment maker Ubiquiti on Tuesday filed a lawsuit against infosec journalist Brian Krebs, alleging he defamed the company by falsely accusing the firm of covering up a cyber-attack.…  ( 8 min )

Lower-end of the family to roll out first – and desktops will have to wait Intel hopes to compete against Nvidia and AMD in the discrete GPU market with now-launched standalone graphics chips for laptops. These components are said to feature a slew of technologies designed to provide smoother gaming experiences and faster content-creation performance.…  ( 12 min )

Open Infrastructure Foundation boasts of growth, but observers note this is mostly existing users scaling up OpenStack's 25th release brings the usual crop of new features to the open-source cloud platform, including support for DPUs, better integration with Prometheus and Kubernetes, and a handy un-delete feature for file system shares.…  ( 8 min )

A misconfigured VPN appliance is to blame It turns out the only thing Russian forces needed to knock thousands of Ukrainian satellite broadband customers offline was a misconfigured VPN.…  ( 7 min )

Mission launched during a pandemic, returned during... oh God, what now? NASA astronaut Mark Vande Hei returned to Earth today aboard a Russian Soyuz capsule and accompanied by two Russian cosmonauts.…  ( 7 min )

Miscreants deployed cryptominers, backdoors since late December, Sophos says VMware's Horizon virtualization platform has become an ongoing target of attackers exploiting the high-profile Log4j flaw to install backdoors and cryptomining malware.…  ( 9 min )

Still can't say goodbye to the legacy browser? Some cookie and COM functionality has been restored Still got that one weird corporate app that simply must use Internet Explorer? Microsoft has tweaked IE mode in its Edge browser to lure the last holdouts.…  ( 7 min )

Claim NashStore will help Russians access common apps from May 9 A group of Russian developers are planning a Google Play alternative for Android users that will give those based in the country access to paid apps and services lost due to sanctions. …  ( 7 min )

Plus: It's looking for more Metaverse engineers in Canada Meta's plans to build a 166-hectare datacenter in the Netherlands' central Flevoland province have been put on hold.…  ( 8 min )

Konica Minolta maintenance system to be installed across 10 national support companies Swedish ERP and business application provider IFS has signed global contracts with Japanese businesses Konica Minolta and Japan Airlines.…  ( 7 min )

Post Nvidia deal collapse, Intel expressed similar interest back in February SK Hynix is reportedly considering forming a consortium to acquire UK chip designer Arm, however, the idea is said to be at a very early stage of planning, and Hynix may not actually proceed with the move.…  ( 8 min )

Cloud and data centre provider's liquidity hit by pandemic, energy costs, intransigent landlords The British division of global cloud and data centre services provider Sungard Availability Services was forced into administration amid a hike in energy bills and after failing to renegotiate landlord rental rates.…  ( 8 min )

No EVs were damaged in the making of this report Researchers from the University of Oxford published details of a vulnerability in the Combined Charging System that has the potential to abort charging.…  ( 7 min )

Non-destructively expand or shrink disk partitions while they still contain data GNOME Partition Editor version 1.4 was released this week by lead maintainer Curtis Gedak.…  ( 8 min )

Gender pay gap narrows, but the US remains top of pay-packet pops Puppet has emitted its seventh annual DevOps salary report, and there is good news: the gender wage gap appears to be narrowing.…  ( 8 min )

UK and Ireland survey reveals difficulties with housekeeping The majority of UK and Ireland SAP users are finding a lack of preparedness in data management is affecting migrations from SAP ECC 6.0 to SAP S/4HANA and/or a push towards automating business processes.…  ( 8 min )

Rejects offer of flat rate payrise, calling offer a 'relative pay cut' due to inflation BT's largest union is rejecting the offer of a flat rate pay rise and threatening to start laying the groundwork for national "statutory industrial ballot action" to ratchet up the pressure on the telecoms biz.…  ( 9 min )

Multi-cloud deal 'is going to take us a little bit longer than we thought,' says CIO The United States Department of Defense has delayed awarding a contract for its massive cloud project – known as the Joint Warfighting Cloud Capability (JWCC) – until December.…  ( 8 min )

Suggests it's prudent to plan for Putin weaponizing Russian products The UK's National Cyber Security Centre (NCSC) has advised users of Russian technology products to reassess the risks it presents.…  ( 8 min )

Meanwhile, Okta squirms as further details of slow hack response emerge Extortion gang Lapsus$ may to be back at work, despite the arrest of seven alleged operatives.…  ( 9 min )

Users of Redmond's two older cloudy CDNs told that the only route to future upgrades is migration Microsoft has created a new version of its Azure Front Door content delivery network (CDN), and told users of its existing two cloudy CDNs that if they want updates the way to get them is migrating to the new product.…  ( 8 min )

Project is a M*A*S*H-up of machine learning and battlefield decision-making A new DARPA initiative aims to ultimately give AI systems the same complex, rapid decision-making capabilities as military medical staff and trauma surgeons who are in the field of battle.…  ( 9 min )

Program co-lead tells us 'energy efficiency is the greatest need' Big names in tech are collaborating with academics to develop energy-optimized machine-learning and quantum-computing systems under the MIT AI Hardware Program, an initiative announced on Tuesday. …  ( 8 min )

SQL injection, race condition, bad cryptographic check pave way for infrastructure network takeovers SentinelOne this week detailed a handful of bugs, including two critical remote code execution vulnerabilities, it found in Microsoft Azure Defender for IoT.…  ( 10 min )

SQL injection, race condition, bad cryptographic check pave way for infrastructure network takeovers SentinelOne this week detailed a handful of bugs, including two critical remote code execution vulnerabilities, it found in Microsoft Azure Defender for IoT.…  ( 10 min )

US watchdog may do something about so-called blank-check IPO capers The US Securities and Exchange Commission is said to be preparing to adopt rules that would make those overseeing special purpose acquisition companies (SPACs) liable for financial exaggerations to investors.…  ( 8 min )

Other manufacturers may follow after import duties passed onto gamers, enthusiasts The US government's lifting of import tariffs on graphics cards from China has already led to a drop in some prices in America.…  ( 9 min )

Symantec team warns ransomware and spying could be next Internet fiends are using a relatively new piece of a malicious code dubbed Verblecon to install cryptominers on infected computers. …  ( 9 min )

US President Joe Biden today has extended the state of national emergency declared to deal with increasingly prevalent and severe malicious cyber threats to the United States national security, foreign policy, and economy. [...]  ( 3 min )

A new zero-day vulnerability in the Spring Core Java framework called 'Spring4Shell' has been publicly disclosed, allowing unauthenticated remote code execution on applications. [...]  ( 4 min )

IT and software consultancy firm Globant has confirmed that they were breached by the Lapsus$ data extortion group, where data consisting of administrator credentials and source code was leaked by the threat actors. [...]  ( 4 min )

The Google Threat Analysis Group (TAG) says more and more threat actors are now using Russia's war in Ukraine to target Eastern European and NATO countries, including Ukraine, in phishing and malware attacks. [...]  ( 3 min )

The Google Threat Analysis Group (TAG) says more and more threat actors are now using Russia's war in Ukraine to target Eastern European and NATO countries, including Ukraine, in phishing and malware attacks. [...]  ( 3 min )

Taiwan-based network-attached storage (NAS) maker QNAP warned on Tuesday that most of its NAS devices are impacted by a high severity OpenSSL bug disclosed two weeks ago. [...]  ( 4 min )

A coordinated operation conducted by the FBI and its international law enforcement partners has resulted in disrupting business email compromise (BEC) schemes in several countries. [...]  ( 4 min )

Threat analysts have discovered a new obfuscation technique used by the Hive ransomware gang, involving IPv4 addresses and a series of conversions that eventually lead to downloading Cobalt Strike beacons. [...]  ( 4 min )

Automated product security helps teams address automotive security vulnerabilities and bugs before - not after - they land companies in the headlines. [...]  ( 4 min )

US satellite communications provider Viasat has shared an incident report regarding the cyberattack that affected its KA-SAT consumer-oriented satellite broadband service on February 24, the day Russia invaded Ukraine. [...]  ( 4 min )

A new spear phishing campaign is taking place in Russia targeting dissenters with opposing views to those promoted by the state and national media about the war against Ukraine. [...]  ( 4 min )

Von 21 Solarstromspeichern erreichen im Test der HTW Berlin vier PV-Speichersysteme die Bestnote A. Insgesamt arbeiten die Systeme immer effizienter.  ( 6 min )

Eine Studie der britischen Medienaufsichtsbehörde Ofcom zeigt, dass 16 Prozent der Drei- bis Vierjährigen bereits Videos der Kurzvideoplattform Tiktok ansehen.  ( 4 min )

Die schnellsten Intel-GPUs erscheinen als Arc 7. Den Anfang machen allerdings die Arc-3-Modelle A370M und A350M für Notebooks.  ( 5 min )

Apples Monopol über iPhone-App-Vertrieb führt nach Ansicht einer niederländischen Stiftung zu "überhöhten Preisen". Sie droht mit einer Sammelklage.  ( 4 min )

Diese Ausgabe der RedMonk-Statistik verzeichnet Balance und wenig Bewegung – anders als im Vorjahr, wo bei der Frühjahrsausgabe die Karten neu gemischt wurden.  ( 7 min )

Themen auf Twitter sind auch in deutscher Sprache verfügbar. Damit will der Kurznachrichtendienst den Feed mit "relevanten Tweets, Events und Anzeigen" füllen.  ( 3 min )

Mit einem auf hiesige KMUs zugeschnittenen Cloud-Portfolio geht Stackit an den Start. Hinter dem Anbieter steht die Schwarz Gruppe.  ( 3 min )

Die Vorschauversion auf das kommende Windows 11-Update ergänzt eine Schaltfläche, um einfacher einen anderen Webbrowser als Edge zum Systemstandard zu machen.  ( 4 min )

Cyberganoven haben das Konsensverfahren hinter dem derzeit beliebtesten Blockchainspiel Axie Infinity kapern können und dabei fette Beute gemacht.  ( 4 min )

Neue Funktionen spendiert Google seinem Cloud-Office Workspace. Allerdings sollten Administratoren und Nutzer einen Blick auf die Tracking-Einstellungen werfen.  ( 4 min )

Findige Bürger nutzen VPNs und Tor, um Internetsperren zu umgehen. Der folgende Überblick zeigt die Stärken und Schwächen der aktuell beliebtesten Tools.  ( 7 min )

Machen Sie mehr aus Ihren Daten: Mit dem Python Scientific Stack die eigenen Unternehmensdaten analysieren & visualisieren. Mit 10 % Frühbucherrabatt bis 19.4.  ( 3 min )

ASRock verkauft ein Mining-System mit 12 Kombiprozessoren von AMD, die es offenbar aufgrund von Defekten nicht in Sonys PS5 geschafft haben.  ( 4 min )

Eine kürzlich entdeckte Sicherheitslücke in zlib könnte Angreifern ermöglichen, Schadcode auszuführen. Ein Patch steht seit vier Jahren bereit.  ( 4 min )

Neben neuen Events für WebContents erlaubt das Release das Festlegen eines Code-Cache-Verzeichnisses und es nutzt Textersetzungen in Menüs unter macOS.  ( 4 min )

Als grundlegende Neuerung erlaubt die UI-Bibliothek nun optionale Concurrency. Server Components sind nach wie vor experimentell.  ( 5 min )

Trotz der Festnahme angeblicher Mitglieder, ist die Lapsus$-Gruppe wohl weiter aktiv. 70 Gigabyte an Daten aus einem weiteren Hack wurden jetzt öffentlich.  ( 4 min )

Bereits sein drittes CDN bringt Microsoft auf den Markt. Es soll mit DevOps-Funktionen, einer engen Azure-Verknüpfung und einem simplen Preismodell punkten.  ( 3 min )

Die elektronische Authentisierungsfunktion des Personalausweises lässt sich jetzt ohne Gang zum Amt aktivieren.  ( 3 min )

Wie unterscheiden sich die Public Clouds von AWS, Azure, Google, der Telekom und Hetzner – und wie nutzen Sie sie effektiv? 10 % Frühbucherrabatt bis 18. April.  ( 3 min )

Wie schon das MacBook Pro kommt die kleine Workstation mit hochohmigen Kopfhörern zurecht. Das bestätigt der Konzern in einem Supportdokument.  ( 4 min )

Das Entwicklerteam hinter dem C++-Microframework Crow baut mit dem ersten stabilen Release die Anbindung an das Cross-Platform-Tool CMake weiter aus.  ( 3 min )

Die neue Version des Kiosksystems aktualisiert den Unterbau, schraubt an der automatischen Konfiguration und optimiert die Bildausgabe.  ( 4 min )

Wer für die eigenen Mitarbeiter einen Chat einrichten will, muss nicht zu MS Teams oder Slack greifen: Die freie Alternative Zulip liegt nun in Version 5.0 vor.  ( 4 min )

Nach der Erschwerung des App-Trackings bereitet Apple offenbar eine dauerhafte Aktivierung von Private Relay vor – zumindest spekuliert das die Branche.  ( 4 min )

Trend Micro warnt vor Angriffen auf eine Sicherheitslücke in zentralen Verwaltungssoftware Apex Central. Zum Abdichten des Lecks stehen Updates bereit.  ( 3 min )

Das Event findet am 3./4. Mai 2022 online statt. Die Veranstalter tragen damit der pandemischen Lage in Deutschland Rechnung.  ( 4 min )

Früh in diesem Jahr erreichen viele Gebiete in Deutschland hohe Waldbrandgefahrenstufen. Mit einem Früherkennungssystem sollen Brände schneller erkannt werden.  ( 4 min )

Googles hundertste Version von Chrome ist da. Zu den wichtigsten Neuerungen zählt die Option, Browser-Fenster unterschiedlichen physischen Monitoren zuzuweisen.  ( 3 min )

Eine ungewöhnliche Kooperation: Samsung und Western Digital arbeiten zusammen. Zwar nicht an gemeinsamen Produkten, aber an Standards zum Thema Zoned Storage.  ( 3 min )

We recently covered creating fancy borders with CSS mask properties, and now we are going to cut the corners with CSS mask and clip-path! A lot of techniques exist to cut different shapes from the corners of any element. … Tricks to Cut Corners Using CSS Mask and Clip-Path Properties originally published on CSS-Tricks. You should get the newsletter.  ( 12 min )

A nascent information stealer called Mars has been observed in campaigns that take advantage of cracked versions of the malware to steal information stored in web browsers and cryptocurrency wallets. "Mars Stealer is being distributed via social engineering techniques, malspam campaigns, malicious software cracks, and keygens," Morphisec malware researcher Arnold Osipov said in a report  ( 3 min )

A duo of researchers has released a proof-of-concept (PoC) demonstrating the ability for a malicious actor to remote lock, unlock, and even start Honda and Acura vehicles by means of what's called a replay attack. The attack is made possible, thanks to a vulnerability in its remote keyless system (CVE-2022-27254) that affects Honda Civic LX, EX, EX-L, Touring, Si, and Type R models manufactured  ( 3 min )

For anyone with interest in cybersecurity, learning Python is a must. The language is used extensively in white hat hacking, and professionals use Python scripts to automate tests. It also has a use in the “soft” side of cybersecurity — like scraping the web for compromised data and detecting bugs.  Featuring nine full-length video courses, The Complete 2022 Python Programmer Bundle helps you  ( 3 min )

The LAPSUS$ data extortion gang announced their return on Telegram after a week-long "vacation," leaking what they claim is data from software services company Globant. "We are officially back from a vacation," the group wrote on their Telegram channel – which has nearly around 54,000 members as of writing – posting images of extracted data and credentials belonging to the company's DevOps  ( 3 min )

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the Department of Energy (DoE) are jointly warning of attacks against internet-connected uninterruptible power supply (UPS) devices by means of default usernames and passwords. "Organizations can mitigate attacks against their UPS devices, which provide emergency power in a variety of applications when normal power sources are  ( 3 min )

SonicWall has released security updates to contain a critical flaw across multiple firewall appliances that could be weaponized by an unauthenticated, remote attacker to execute arbitrary code and cause a denial-of-service (DoS) condition. Tracked as CVE-2022-22274 (CVSS score: 9.4), the issue has been described as a stack-based buffer overflow in the web management interface of SonicOS that  ( 2 min )

In this series of articles, we highlight design patterns and techniques to design better interfaces. You can also find more examples in [“Smart Interface Design Patterns”](https://smart-interface-design-patterns.com/), a 6h-video course with 100s of hand-picked examples, curated by Vitaly.  ( 10 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Chatbots could one day replace search engines. Here’s why that’s a terrible idea. Large AI models can simulate natural language with remarkable realism. Trained on hundreds of books and much of the internet,…  ( 4 min )

The world’s oceans are amazing carbon sponges. They already capture a quarter of human-produced carbon dioxide when surface waters react with the greenhouse gas in the air or marine organisms gobble it up as they grow. Their effectiveness has prompted growing hopes that we could somehow accelerate those natural processes to boost the amount the…  ( 4 min )

Eine kürzlich entdeckte Sicherheitslücke in zlib könnte Angreifern ermöglichen, Schadcode auszuführen. Ein Patch steht seit vier Jahren bereit.  ( 4 min )

Trend Micro warnt vor Angriffen auf eine Sicherheitslücke in zentralen Verwaltungssoftware Apex Central. Zum Abdichten des Lecks stehen Updates bereit.  ( 3 min )

Google has released Chrome 100 today, March 29th, 2022, to the Stable desktop channel, and it includes a new logo, security improvements, development features, and more. [...]  ( 4 min )

A newly launched information-stealing malware variant called Mars Stealer is rising in popularity, and threat analysts are now spotting the first notable large-scale campaigns employing it. [...]  ( 4 min )

A hacker has stolen almost $620 million in Ethereum and USDC tokens from Axie Infinity's Ronin network bridge, making it possibly the largest crypto hack in history. [...]  ( 3 min )

Online retail and photography manufacturing platform Shutterfly has disclosed a data breach that exposed employee information after threat actors stole data during a Conti ransomware attack. [...]  ( 3 min )

Today, the US Federal Trade Commission (FTC) sued Intuit, the maker of tax preparation software TurboTax, over deceptive advertising campaigns pitching free tax filing products that millions couldn't use. [...]  ( 3 min )

The Federal Bureau of Investigation (FBI) warned US election officials on Tuesday of an ongoing and widespread phishing campaign trying to steal their credentials since at least October 2021. [...]  ( 4 min )

A new campaign from the hacking group tracked as APT36, aka 'Transparent Tribe' or' Mythic Leopard,' has been discovered using new custom malware and entry vectors in attacks against the Indian government. [...]  ( 4 min )

In a joint advisory with the Department of Energy, the Cybersecurity and Infrastructure Security Agency (CISA) warned U.S. organizations today to secure Internet-connected UPS devices from ongoing attacks. [...]  ( 3 min )

A Wyze Cam internet camera vulnerability allows unauthenticated, remote access to videos and images stored on local memory cards and has remained unfixed for almost three years. [...]  ( 4 min )

As important as end user training and message filtering may be, there is a third method that tip the odds in their favor. Because phishing attacks often come disguised as password reset emails, it is important to handle password resets in a way that makes it obvious that email messages are not part of the password reset process. [...]  ( 5 min )

British-based cybersecurity vendor Sophos warned that a recently patched Sophos Firewall bug allowing remote code execution (RCE) is now actively exploited in attacks. [...]  ( 3 min )

Europol has announced the arrest of 108 people suspected of being involved in an international call center operation that tricked victims into investment scams. [...]  ( 3 min )

Security researchers are warning of a relatively new malware loader, that they track as Verblecon, which is sufficiently complex and powerful for rannsomware and erespionage attacks, although it is currently used for low-reward attacks. [...]  ( 4 min )

Microsoft has released the optional KB5011563 cumulative update preview for Windows 11, with fixes for stop errors triggering blue screens of death (BSOD) and other issues. [...]  ( 5 min )

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal civilian agencies to patch a Google Chome zero-day and a critical Redis vulnerability actively exploited in the wild within the next three weeks. [...]  ( 3 min )

Cops say they saw gadget added at family safety center A Tennessee man was arrested on Friday for allegedly trying to track his partner by attaching an Apple Watch to her car to monitor her whereabouts.…  ( 9 min )

Folks fill out online forms only to be told to upgrade to paid versions Intuit, makers of the tax-filing software TurboTax, deceives folks with false advertising and claims its product is free to use when it isn't always free, the US Federal Trade Commission claimed in a lawsuit filed Monday.…  ( 9 min )

Cloud giant's Graviton forcing the hand of rivals, according to analysts The increasing adoption of Arm-compatible processors by cloud service providers is expected to grow the CPU architecture's penetration rate in datacenter servers to 22 percent by 2025, according to a report by Taiwan-based research firm TrendForce.…  ( 9 min )

Cloud giant's Graviton forcing the hand of rivals, according to analysts The increasing adoption of Arm-compatible processors by cloud service providers is expected to grow the CPU architecture's penetration rate in datacenter servers to 22 percent by 2025, according to a report by Taiwan-based research firm TrendForce.…  ( 9 min )

As with analytics, so with ML – we're keeping everything in the box, says Big Red Oracle has added autoML, real-time elasticity, and price-performance trade-offs to Heatwave, the analytics engine it piggybacks on MySQL transactional database.…  ( 8 min )

Optional update finally adds one-click default app selection to Windows 11 The latest set of optional cumulative updates for Windows 11 contains an unlisted addition that users have been clamoring for since the OSes release: A one-click default browser change. …  ( 8 min )

First world problems: Too many NVMe drives, not enough seconds to spare A new Linux kernel patch from a Google engineer resolves a problem caused by a condition that many of us might quite like to experience – having too many NVMe drives.…  ( 8 min )

Toward making software development 'frictionless' over multiple processors, accelerators Arm says heterogeneous compute architectures – those with a mix of CPUs, GPUs, DPUs, and other processor types – pose a challenge for software developers, and greater multi-architecture support is needed to address this.…  ( 8 min )

Mnuchin to be board chair of Softbank-backed security startup Zimperium Former US Treasury secretary Steve Mnuchin's private equity firm has announced its plans to buy a controlling stake in a mobile cybersecurity company for more than half a billion dollars.…  ( 8 min )

It may have an official-sounding name but it's a community effort Rolling Rhino is a new community remix of Ubuntu, but with a unique twist: it has a whole new release model, rather than just a different desktop.…  ( 8 min )

Operators used social media to distort status of fighting, instill panic in residents Ukraine's security agency has shut down five bot farms since the start of Russia's invasion of the country almost five weeks ago, slowing down a Russian operation designed to spread disinformation in the war-torn country and to sow panic among its frightened residents.…  ( 8 min )

Stopping Amazon, Google, others from prioritizing own products and services A letter from the Department of Justice to Congress makes it clear where the Biden administration stands on antitrust legislation targeting big tech: They're all for it.…  ( 8 min )

Aims for consistent management across public and private clouds Microsoft has unveiled a public preview of Arc-enabled Azure Stack HCI.…  ( 8 min )

The GPU giant says it's for the 'most ambitious users' Nvidia is finally releasing its latest monster of a graphics processor, the GeForce RTX 3090 Ti GPU, which it said will super-power content creation applications and enable 8K gaming, assuming you're willing to part with a couple thousand dollars.…  ( 8 min )

Interesting blue sky research aims to put the quant in quantum, although progress in sector isn't rapid IBM is working with HSBC bank to explore potential applications for quantum computing in financial services.…  ( 8 min )

Crew alleged to have banked over $1m thanks to pandemic-induced usage bumps Some might wish they could go back to the onset of the pandemic and invest in online communication tools. The problem for three software developers facing charges of insider trading is that they worked for one of these companies.…  ( 8 min )

You can't fool me, young man. It's C all the way down! Believe it or not, not everything is based on C. There are current, shipping, commercial OSes written before C was invented, and now others in both newer and older languages that don't involve C at any level or layer.…  ( 11 min )

Legit employers don't normally send a check before you've started – or ask you to send money to a Bitcoin address Scammers appear to be targeting university students looking to kickstart their careers, according to research from cybersecurity biz Proofpoint.…  ( 9 min )

Move follows Microsoft's own tools to find out how things are really done Celonis has bought Process Analytics Factory (PAF), a firm that integrates its technology with Microsoft's Power BI platform, in a deal said to be worth $100m.…  ( 8 min )

Not the first time the letters POS have been associated with someone's repo Sometimes the best things are the most simple. A case in point: sending GitHub issues to an old thermal POS printer via a Raspberry Pi.…  ( 9 min )

Playbook on how to sell into market worth tens of billions The UK government has published a guide to public-sector technology procurement which promises to offer vendors insight into forthcoming technology spending in the £46bn ($60bn) market.…  ( 9 min )

German retailer stops selling flying cameras from firm the US labels an arm of China's government Chinese drone-maker DJI has denied multiple allegations it has aided Russia's military during the illegal invasion of Ukraine – an extraordinary claim, as the firm has previously come to the attention of US authorities for leaking data and aiding human rights abuses.…  ( 9 min )

Software will figure out number of beds needed – up to three weeks ahead At least 100 NHS trusts in England are to start using machine-learning software to predict the number of patients expected to be admitted to Accident and Emergency departments each day.…  ( 9 min )

Of course it will officially be massively popular – regardless of how many actually use it China's top government officials have a new space to meet and "build the [Chinese Communist] Party": a custom-built metaverse.…  ( 9 min )

JD.com's own servers, sold by the rackful, using cold plate cooling tech to tease possible 1.1 PUE Chinese kit-maker to the stars, Inspur Technologies, and local e-commerce titan JD.com have started jointly offering servers – the very kit the web bazaar uses in production.…  ( 9 min )

Windows backdoor shows off some interesting techniques Cyber-criminals are using compromised Microsoft Exchange servers to spam out emails designed to infect people's PCs with IcedID,…  ( 10 min )

Massive job losses reported across Middle Kingdom's tech sector China's big tech companies are making deep job cuts, and at least one is framing them as "graduation" from the company.…  ( 9 min )

Chrome trials scheduled for FLEDGE and Topics APIs Google is preparing another round of tests for the latest iteration of its purportedly private-preserving ad technology, after last year's Federated Learning of Cohorts (FLoC) experiment revealed the need for further refinement.…  ( 10 min )

Don't forget about our big stateside expansion plans, say Asian foundries Contract chip manufacturers TSMC and Samsung Electronics reportedly want to ensure they can receive some part of the $52 billion in subsidies the United States plans to use to expand the country's chipmaking footprint.…  ( 8 min )

Die EU-Kommission will mit dem geplanten Chips-Gesetz massiv Investitionen fördern. Mitgliedsstaaten und die Industrie sehen noch Bedarf zum Nachjustieren.  ( 5 min )

In einem offenen Brief warnt der CEPIS-Dachverband nationaler Informatikvereinigungen vor "Client-Side Scanning" und fordert ein Recht auf Verschlüsselung.  ( 3 min )

Der 1,5 Exaflops starke Supercomputer Frontier geht erst 2023 vollständig ans Netz. Bis dahin gibt es den Mini-Ableger Crusher.  ( 3 min )

Das Arbeiten zu Hause mit Chat- und Video-Tools lässt die Grenzen zwischen Beruf und Privatleben verschwimmen. Spezielle Features sollen sensibilisieren.  ( 4 min )

Dank Akku und Solarpanel können Anwender die Reolink Go 4G nahezu autark einsetzen. Wie gut die Überwachungskamera in der Praxis funktioniert, zeigt ein Test.  ( 6 min )

Ein Strategiepapier legt die Ziele der Cyberagentur bis 2025 fest: Es gehe darum, mit Forschung die Cybersicherheit in Deutschland gesamthaft zu stärken.  ( 4 min )

Angreifer könnten aufgrund von Sicherheitslücken in nf_tables im Linux-Kernel ihre Rechte zu Root ausweiten. Patches dichten die Sicherheitslecks ab.  ( 4 min )

Da immer mehr Dienstleistungen digitalisiert werden, warnt die Bundesvereinigung der Senioren-Assistenten Deutschland vor einer zunehmenden Vereinsamung.  ( 3 min )

Nicht nur die größten globalen Cloud-Anbieter kommen aus den USA, auch die Cloud-Rechenzentren ballen sich in Nordamerika.  ( 3 min )

Nvidia quetscht die letzten Prozente Leistung aus der GA102-GPU und verkauft das Ergebnis als GeForce RTX 3090 Ti – mit gehörigem Preisaufschlag.  ( 4 min )

Das Nutzen der Möglichkeiten für die Verwaltung von Endgeräten ist kein Kann, sondern wird zum Muss.  ( 6 min )

Die Frage "Ist diese Software-Architektur zukunftssicher?" kann man eigentlich generell mit "nein" beantworten.  ( 7 min )

Das vogelbunte Linux-System etwa zum Suchen von Sicherheitslücken lässt sich auf dem Stable-Zweig Debians nieder. Neu ist eine Ausgabe für den Raspberry Pi 4.  ( 5 min )

Professionelle Videos sind wichtiger Teil der Unternehmenskommunikation. Der Workshop vermittelt Grundlagen von Planung über Dreh bis zur Postproduktion.  ( 4 min )

Amazon führt die ARM-Revolution an: AWS' Graviton-Prozessoren machen 2022 einen großen Teil aller neuen Server aus.  ( 4 min )

Das Zusammenspiel von Debian-Systemen und Redis kann zu ernsten Sicherheitsproblemen führen. Dagegen abgesicherte Versionen schaffen Abhilfe.  ( 3 min )

An fünf Terminen im Mai und Juni lernen Interessierte in 20 praxisnahen Stunden, ihre Rolle als Product Owner zu meistern.  ( 4 min )

In der Nacht kam es zu einem massiven Cyberangriff auf einen der größten ukrainischen Internetprovider. Die Lage normalisiert sich inzwischen jedoch wieder.  ( 3 min )

Am Montag war Twitter fast eine halbe Stunde lang nur eingeschränkt zu erreichen. Grund war eine Fehlkonfiguration in Russland. Über die Gründe wird spekuliert.  ( 3 min )

Am kommenden Dienstag geht es beim nächstenThementag der Online-Konferenz storage2day um Storage für die Cloud und aus der Cloud. Die Teilnahme ist kostenlos.  ( 3 min )

Angreifer könnten die Authentifizierung in einigen Zyxel-Firewalls umgehen und dadurch die Kontrolle über die Geräte erlangen. Firmware-Updates stehen bereit.  ( 3 min )

Wie lässt sich Microsofts Cloud-Officepaket 365 sicher und in Übereinstimmung mit den unternehmenseigenen Compliance-Regeln einsetzen? Bis 12.4. 10 % Rabatt.  ( 3 min )

After two years where almost everything moved online, 2022 marks the return of in-person conferences. In fact, [SmashingConf is back](https://smashingconf.com/conferences): coming to San Francisco and Austin in June, Freiburg (Germany) in September, and New York in October.  ( 3 min )

Are you a designer or developer affected by the war in Ukraine? Here are some options to consider if you’re looking for a design or tech job.  ( 3 min )

Angreifer könnten aufgrund von Sicherheitslücken in nf_tables im Linux-Kernel ihre Rechte zu Root ausweiten. Patches dichten die Sicherheitslecks ab.  ( 4 min )

Das Zusammenspiel von Debian-Systemen und Redis kann zu ernsten Sicherheitsproblemen führen. Dagegen abgesicherte Versionen schaffen Abhilfe.  ( 3 min )

Angreifer könnten die Authentifizierung in einigen Zyxel-Firewalls umgehen und dadurch die Kontrolle über die Geräte erlangen. Firmware-Updates stehen bereit.  ( 3 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. A US oil-drilling hotspot is kicking out far more methane than we thought The news: One of the largest and fastest-growing oil production sites in the US is emitting far more methane than…  ( 4 min )

At last year’s Google I/O, its annual showcase of new widgets and work-in-progress tech, CEO Sundar Pichai revealed his company’s “latest breakthrough in natural-language understanding”: a chatbot called LaMDA, designed to converse on any topic.   He then gave a demo in which LaMDA answered questions about Pluto in natural language. The exchange showed off a…  ( 7 min )

A threat actor of likely Pakistani origin has been attributed to yet another campaign designed to backdoor targets of interest with a Windows-based remote access trojan named CrimsonRAT since at least June 2021. "Transparent Tribe has been a highly active APT group in the Indian subcontinent," Cisco Talos researchers said in an analysis shared with The Hacker News. "Their primary targets have  ( 3 min )

A group of academics has designed a new system known as "Privid" that enables video analytics in a privacy-preserving manner to combat concerns with invasive tracking. "We're at a stage right now where cameras are practically ubiquitous. If there's a camera on every street corner, every place you go, and if someone could actually process all of those videos in aggregate, you can imagine that  ( 3 min )

Cybersecurity firm Sophos on Monday warned that a recently patched critical security vulnerability in its firewall product is being actively exploited in real-world attacks. The flaw, tracked as CVE-2022-1040, is rated 9.8 out of 10 on the CVSS scoring system and impacts Sophos Firewall versions 18.5 MR3 (18.5.3) and older. It relates to an authentication bypass vulnerability in the User Portal  ( 2 min )

An unidentified threat actor has been observed employing a "complex and powerful" malware loader with the ultimate objective of deploying cryptocurrency miners on compromised systems and potentially facilitating the theft of Discord tokens. "The evidence found on victim networks appears to indicate that the goal of the attacker was to install cryptocurrency mining software on victim machines,"  ( 3 min )

Cybersecurity researchers have shed more light on a malicious loader that runs as a server and executes received modules in memory, laying bare the structure of an "advanced multi-layered virtual machine" used by the malware to fly under the radar. Wslink, as the malicious loader is called, was first documented by Slovak cybersecurity company ESET in October 2021, with very few telemetry hits  ( 3 min )

A threat actor dubbed "RED-LILI" has been linked to an ongoing large-scale supply chain attack campaign targeting the NPM package repository by publishing nearly 800 malicious modules. "Customarily, attackers use an anonymous disposable NPM account from which they launch their attacks," Israeli security company Checkmarx said. "As it seems this time, the attacker has fully-automated the process  ( 3 min )

An independent security researcher has shared what's a detailed timeline of events that transpired as the notorious LAPSUS$ extortion gang broke into a third-party provider linked to the cyber incident at Okta in late January 2022. In a set of screenshots posted on Twitter, Bill Demirkapi published a two-page "intrusion timeline" allegedly prepared by Mandiant, the cybersecurity firm hired by  ( 3 min )

Privateer to help avoid collisions and more debris around our planet Apple co-founder Steve Wozniak opened up about his space startup Privateer at the Global Entrepreneurship Congress in Riyadh, Saudi Arabia this week.…  ( 9 min )

Gosh, some apps are flatter than others? Whatever shall we do? GNOME 42 is here, but its new look and feel doesn't yet include all of the environment. This is already causing rumblings of discontent.…  ( 9 min )

Says he wasn't given leave options available to women colleagues Michael Stickler, a former IBM data scientist, has sued Big Blue for gender discrimination and retaliation after he complained that he was not being offered the same family leave options available to his women colleagues.…  ( 9 min )

CPU clock versus cache The CPU horse race continues between Intel and AMD, this time with the impending availability of Intel's Core i9-12900KS, which is said to be able to hit 5.5GHz on two cores.…  ( 8 min )

Authentication bypass followed by remote-code execution at the network boundary Sophos has patched a remote code execution (RCE) vulnerability in its firewall gear that was disclosed via its bug-bounty program.…  ( 8 min )

Another bug squashed in JavaScript engine Google Chrome and Microsoft Edge have been updated to patch a security flaw an exploit for which is said to be in the wild.…  ( 8 min )

More than 70 businesses created fake profiles to close sales Two Stanford researchers have fallen down a LinkedIn rabbit hole, finding over 1,000 fake profiles using AI-generated faces at the bottom.…  ( 8 min )

Mustang Panda deploys variant of Korplug malware to target European officials and ISPs A China-based threat group is likely running a month-long campaign using a variant of the Korplug malware and targeting European diplomats, internet service providers (ISPs) and research institutions via phishing lures that refer to Russia's invasion of Ukraine and COVID-19 travel restrictions.…  ( 9 min )

Plantronics and Polycom have a new parent company HP Inc sees the future of its business as one supporting a workforce partially based at home and partially in the office, and appears to have bought office telecom giant Poly for that reason.…  ( 8 min )

'Tiny' testbed already crushes Oak Ridge's past supercomputers The United States has opened up a small but powerful test system for researchers to get a taste of what is expected to become the country's fastest supercomputer and one of the world's fastest. And the tiny testbed, named "Crusher" is already faster than previous top US supercomputers.…  ( 9 min )

'Not all open source is created equal' Interview  Cloud infrastructure outfit HashiCorp has traditionally been all about the freemium model and sold plenty of self-managed subscriptions for its services to customers over the years. That is changing.…  ( 11 min )

Subsidiary sales, enterprise division may be responsible for the buoying Chinese telecom giant Huawei's 2021 report is out, showing the company had a massive drop in total revenue last year, but an even bigger bump in profit. …  ( 9 min )

Refurbed former Thomson Reuters DC adds 12,000 sqm to holdings Colocation firm Telehouse has opened its fifth datacenter in London Docklands, claiming it will be the company’s largest global facility once fully up and running. The firm has invested £223 million into refurbishing the building, which was formerly the site of a datacenter operated by Thomson Reuters.…  ( 9 min )

Plus: Ransomware gangster sentenced, Dell patches more Log4j bugs, and cartoon apes gone bad In Brief  Triton malware remains a threat to the global energy sector, according to an FBI warning.…  ( 11 min )

Plus: GPT-NeoX-20B, the largest open-source language model available yet, and a new AI Silicon Valley VC fund In brief  Ukraine's vice prime minister has confirmed Clearview AI's controversial facial recognition system is being used to identify dead Russian soldiers just weeks after it started using the tech in the conflict.…  ( 9 min )

ECASH Act calls for Treasury to develop electronic currency, no blockchain required House Democrats on Monday plan to introduce a law bill that calls for the development of an electronic version of the US dollar that has the same legal status and privacy expectations as physical currency.…  ( 10 min )

Android messaging heist isn't the action of a well company. Let us help Opinion  One of the joys of academic research is that if you do it right, you can prove the truth. In the case of computer science professor Douglas Leith, this truth is that Google has been taking detailed notes of every telephone call and SMS message made and received on the default Android apps.…  ( 10 min )

...8 years after role in controversial £10bn IT deal with UK tax authority was set to end The UK tax collector has extended its relationship with French IT service provider Capgemini in a £215m contract, which awards the outsourcer work to look after tech provided under the controversial 2004 Aspire contract at least eight years beyond the first proposed end date for the deal.…  ( 9 min )

Forgive the self-taught Visual Basic programmer, for they know not what they do. Or do they? Who, Me?  Thank goodness for code reviews. However things weren't always so squeaky clean as one Register reader discovered while attempting to sort another's sweary source. Welcome to Who, Me?…  ( 9 min )

Teams-like application boasts 500 million users, but Microsoft has more active users Alibaba Cloud has decided to make its DingTalk collaborative workplace platform more attractive to enterprise customers, in China and beyond.…  ( 8 min )

Just look at Ericsson and ISIS, Ashley Yablon says If ZTE and other Chinese giants defy bans on selling American technology to Russia, it will be because they can't help but chase the revenue, says Ashley Yablon, the whistleblower whose evidence led to ZTE being fined for willfully ignoring the US ban on exports to Iran.…  ( 10 min )